Jump to content

Sudden Freeze ups started and occasional blue screens

chessder58

By chessder58
in Resolved Malware Removal Logs

 Share

Recommended Posts

chessder58

chessder58

Posted
  • Author
Posted

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 6/16/2010 5:51:22 PM
System Uptime: 12/28/2013 10:36:52 PM (0 hours ago)
.
Motherboard: Dell Inc. |  | 08CNC9
Processor: Intel® Core i3 CPU       M 330  @ 2.13GHz | U2E1 | 2133/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 59 GiB total, 8.961 GiB free.
D: is FIXED (NTFS) - 230 GiB total, 225.27 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP664: 12/26/2013 9:15:31 PM - Windows Update
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
Accidental Damage Services Agreement
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.05)
Adobe Shockwave Player 12.0
Advanced Audio FX Engine
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Application Verifier x64 External Package
Atheros Driver Installation Program
Banctec Service Agreement
Bing Bar
Bing Desktop
Bing Rewards Client Installer
Bonjour
CambridgeSoft ChemDraw McGraw-Hill 12.0
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Compatibility Pack for the 2007 Office system
Complete Care Business Service Agreement
Consumer In-Home Service Agreement
D3DX10
Dasher
Dell DataSafe Online
Dell Dock
Dell Edoc Viewer
Dell Home Systems Service Agreement
Dell System Detect
Dell Touchpad
Dell Webcam Central
Dell Wireless WLAN Card Utility
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
GoToAssist 8.0.0.514
Haali Media Splitter
HHD Software Free Hex Editor Neo 5.14
Hi-Rez Studios Authenticate and Update Service
HP Product Detection
iCloud
InstallIQ Updater
Intel® Graphics Media Accelerator Driver
Intel® Management Engine Components
iTunes
Java 7 Update 17 (64-bit)
Java 7 Update 45
Java Auto Updater
Junk Mail filter update
Kits Configuration Installer
Live! Cam Avatar Creator
Malwarebytes Anti-Malware version 1.75.0.1300
Mesh Runtime
Messenger Companion
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Default Manager
Microsoft Mouse and Keyboard Center
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Office 64-bit Components 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Standard 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft UI Engine
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
Microsoft Works
MobileMe Control Panel
Mozilla Firefox 12.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
My Dell
PokerStars.net
PowerDVD DX
Premium Service Agreement
QualxServ Service Agreement
Quickset64
QuickTime
RadioRage Internet Explorer Toolbar
RadioRage Toolbar
RealDownloader
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealNetworks - Microsoft Visual C++ 2010 Runtime
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1
Roxio Burn
Safari
SDK Debuggers
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817641) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office Outlook 2007 (KB2825644) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition
Smite
Speccy
swMSM
Trend Micro™ Titanium™
TripControl 4.0
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Windows App Certification Kit Native Components
Windows App Certification Kit x64
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Software Development Kit
Windows Software Development Kit DirectX x64 Remote
Windows Software Development Kit DirectX x86 Remote
Windows Software Development Kit EULA
Windows Software Development Kit for Windows Store Apps
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
Windows Software Development Kit Redistributables
WinZip 17.0
WPT Redistributables
WPTx64
Xata XML Core Services
.
==== Event Viewer Messages From Past Week ========
.
12/28/2013 10:38:13 PM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MsMpSvc service.
12/25/2013 1:31:50 PM, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
12/24/2013 5:25:14 PM, Error: atapi [11]  - The driver detected a controller error on \Device\Ide\IdePort0.
12/24/2013 11:46:50 PM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Dnscache service.
.
==== End Of File ===========================
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16428  BrowserJavaVersion: 10.45.2
Run by Moore at 22:46:18 on 2013-12-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3893.2333 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
D:\HiPatchService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\PROGRA~2\RADIOR~2\bar\2.bin\4jbarsvc.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files (x86)\RadioRage_4j\bar\2.bin\AppIntegrator64.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Users\Moore\AppData\Local\Apps\2.0\4TXZL50T.9ZC\YR73L6VR.J3K\dell..tion_0f612f649c4a10af_0005.0004_3ddfe37344028d2c\DellSystemDetect.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\sppsvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.

uSearch Bar = Preserve
uURLSearchHooks: <No Name>: {3c35ad63-af1d-4e21-b484-b6651a8efcf9} - C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jSrcAs.dll
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
BHO: Toolbar BHO: {48909954-14fb-4971-a7b3-47e7af10b38a} - C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jbar.dll
BHO: Search Assistant BHO: {5848763c-2668-44ca-adbe-2999a6ee2858} - C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jSrcAs.dll
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: RadioRage: {78BA36C9-6036-482B-B48D-ECCA6F964B84} - C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jbar.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
TB: RadioRage: {78ba36c9-6036-482b-b48d-ecca6f964b84} - C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jbar.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [DellSystemDetect] C:\Users\Moore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
mRun: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
mRun: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
mRun: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
mRun: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [bingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe
Trusted Zone: dell.com


TCP: NameServer = 66.90.132.162 66.90.130.101
TCP: Interfaces\{634424DC-7940-45D1-A933-2D5F0E4DCA95} : DHCPNameServer = 66.90.132.162 66.90.130.101
TCP: Interfaces\{634424DC-7940-45D1-A933-2D5F0E4DCA95}\C696E6B6379737 : DHCPNameServer = 24.116.2.50 24.116.2.34
TCP: Interfaces\{634424DC-7940-45D1-A933-2D5F0E4DCA95}\D434847457563747 : DHCPNameServer = 151.164.1.9 151.164.1.8
TCP: Interfaces\{634424DC-7940-45D1-A933-2D5F0E4DCA95}\D49702255637E45647 : DHCPNameServer = 64.189.74.42 66.112.235.200
TCP: Interfaces\{634424DC-7940-45D1-A933-2D5F0E4DCA95}\D4F6F62756 : DHCPNameServer = 192.168.0.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs= c:\progra~3\bprote~1\261125~1.80\{eab34~1\protec~1.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
x64-Run: [broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe
x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [RadioRage Home Page Guard 64 bit] "C:\PROGRA~2\RADIOR~2\bar\2.bin\AppIntegrator64.exe"
x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll
x64-Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDrawMGH\NPCDPMGH32.DLL
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-9-27 248240]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-9-20 55280]
R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2010-3-27 92160]
R2 BingDesktopUpdate;Bing Desktop Update service;C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [2013-6-20 173192]
R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;D:\HiPatchService.exe [2013-5-17 9216]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2011-4-27 134944]
R2 RadioRage_4jService;RadioRageService;C:\PROGRA~2\RADIOR~2\bar\2.bin\4jbarsvc.exe [2013-11-14 44752]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-4-29 2320920]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\System32\drivers\CtClsFlt.sys [2012-11-29 174848]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-3-27 56344]
R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2013-11-25 158976]
R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2013-11-25 271872]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-6-10 539240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-2-28 183560]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-4-23 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-3-8 1492840]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-12-10 111616]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-3-27 220672]
S3 SWDUMon;SWDUMon;C:\Windows\System32\drivers\SWDUMon.sys [2012-11-19 15712]
S3 Te.Service;Te.Service;C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [2012-7-25 126976]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-1 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-6-17 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2013-12-28 18:41:19 -------- d-----w- C:\Users\Moore\AppData\Local\{8B60B0FF-9A99-4D7F-976B-A12CFF4E49B9}
2013-12-28 14:56:19 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{868B947B-76D5-453A-886C-D751F61728B7}\mpengine.dll
2013-12-27 03:16:26 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-12-25 17:41:41 -------- d-----w- C:\Users\Moore\AppData\Local\{60E44843-7AB8-4B4B-9D5F-11307E2909AB}
2013-12-24 15:59:42 -------- d-----w- C:\Users\Moore\AppData\Local\{375CA5BF-2903-4E4B-A959-D68E2F731B66}
2013-12-24 01:00:01 -------- d-----w- C:\Users\Moore\AppData\Local\{B24C0EB2-0698-4EFB-A8A6-61FBB4092319}
2013-12-22 18:56:21 -------- d-----w- C:\Users\Moore\AppData\Local\{656B82BA-9815-4BC5-82B2-064E699367EE}
2013-12-22 05:11:57 -------- d-----w- C:\Users\Moore\AppData\Local\{900665EA-F2DA-4AF4-ADD3-F17D667B3481}
2013-12-21 15:20:04 -------- d-----w- C:\Users\Moore\AppData\Local\{D29C24CD-EFB9-470B-8EB7-6C57D5AB1BAD}
2013-12-21 00:03:02 -------- d-----w- C:\Users\Moore\AppData\Local\{5504E3E4-2A7E-4761-81B9-1E56B844B9E6}
2013-12-20 00:40:09 -------- d-----w- C:\Users\Moore\AppData\Local\{1398E85A-4DB0-4572-812C-CBD9E25C96E5}
2013-12-18 23:46:19 -------- d-----w- C:\Users\Moore\AppData\Local\{3EE3CCBB-85DC-4E8E-ADA8-D1B57BDE5131}
2013-12-16 23:43:52 -------- d-----w- C:\Users\Moore\AppData\Local\{FD9E9AEC-F2DD-416B-8037-04C29E7CB79D}
2013-12-15 15:56:14 -------- d-----w- C:\Users\Moore\AppData\Local\{255BF33D-D75A-46A7-B566-191CD822977B}
2013-12-13 18:33:48 -------- d-----w- C:\Users\Moore\AppData\Local\{D81372F4-73D8-47E8-959C-FA156A84656D}
2013-12-12 18:49:23 -------- d-----w- C:\Users\Moore\AppData\Local\{239DB501-B62C-49FC-BBD5-840851CBD87F}
2013-12-11 05:32:28 164864 ----a-w- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
2013-12-11 05:32:27 167424 ----a-w- C:\Program Files\Windows Media Player\wmplayer.exe
2013-12-11 05:32:27 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
2013-12-11 05:32:26 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
2013-12-11 05:29:59 1995264 ----a-w- C:\Windows\System32\inetcpl.cpl
2013-12-11 05:29:57 4243968 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-12-11 05:29:56 5769216 ----a-w- C:\Windows\System32\jscript9.dll
2013-12-11 02:07:15 335360 ----a-w- C:\Windows\System32\msieftp.dll
2013-12-11 02:07:15 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll
2013-12-11 02:07:13 3155968 ----a-w- C:\Windows\System32\win32k.sys
2013-12-11 02:07:12 465920 ----a-w- C:\Windows\System32\WMPhoto.dll
2013-12-11 02:07:12 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll
2013-12-11 02:07:07 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2013-12-11 02:07:07 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2013-12-11 02:06:50 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2013-12-11 02:06:50 2048 ----a-w- C:\Windows\System32\tzres.dll
2013-12-11 02:06:46 230400 ----a-w- C:\Windows\System32\drivers\portcls.sys
2013-12-11 02:06:46 116736 ----a-w- C:\Windows\System32\drivers\drmk.sys
2013-12-11 02:06:45 202752 ----a-w- C:\Windows\System32\scrrun.dll
2013-12-11 02:06:45 168960 ----a-w- C:\Windows\System32\wscript.exe
2013-12-11 02:06:45 163840 ----a-w- C:\Windows\SysWow64\scrrun.dll
2013-12-11 02:06:45 156160 ----a-w- C:\Windows\System32\cscript.exe
2013-12-11 02:06:45 150016 ----a-w- C:\Windows\System32\wshom.ocx
2013-12-11 02:06:45 141824 ----a-w- C:\Windows\SysWow64\wscript.exe
2013-12-11 02:06:45 126976 ----a-w- C:\Windows\SysWow64\cscript.exe
2013-12-11 02:06:45 121856 ----a-w- C:\Windows\SysWow64\wshom.ocx
2013-12-10 16:07:41 -------- d-----w- C:\Users\Moore\AppData\Local\{51165B57-5929-433E-9667-2ABC2B64B87C}
2013-12-08 05:30:19 -------- d-----w- C:\Users\Moore\AppData\Local\{DEEB3CB0-3805-466C-9BDB-B8FEAAA23C59}
2013-12-07 17:20:01 -------- d-----w- C:\Users\Moore\AppData\Local\{C2F8B828-2215-41F2-9801-BC87716FCEA1}
2013-12-06 23:53:59 -------- d-----w- C:\Users\Moore\AppData\Local\{39A6E6B3-1CD9-4798-AB53-329DA377E85F}
2013-12-06 16:29:19 965000 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{665E94C7-C34F-424D-830A-F2A35960B26E}\gapaengine.dll
2013-12-05 03:09:14 -------- d-----w- C:\Users\Moore\AppData\Local\{0F591E7D-582C-4E79-8D8C-0C2B222ED706}
2013-12-03 23:58:18 -------- d-----w- C:\Users\Moore\AppData\Local\{979E96DC-25DA-413F-B769-A643AC791FD8}
2013-12-03 00:48:15 -------- d-----w- C:\Users\Moore\AppData\Local\{E4046536-B86A-47F2-9A24-B91F879BD0FA}
2013-12-01 15:51:30 -------- d-----w- C:\Users\Moore\AppData\Local\{13CC7549-670E-4989-AA85-65675EB874F4}
2013-11-30 15:56:27 -------- d-----w- C:\Users\Moore\AppData\Local\{7EEB970A-4318-423C-8681-4B20C0AB8EA5}
2013-11-30 03:56:02 -------- d-----w- C:\Users\Moore\AppData\Local\{0819869D-DAF1-4BC9-953B-36130D8A59E6}
.
==================== Find3M  ====================
.
2013-12-11 23:08:40 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 23:08:40 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-11-26 10:19:07 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2013-11-26 10:18:23 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2013-11-26 09:48:07 66048 ----a-w- C:\Windows\System32\iesetup.dll
2013-11-26 09:46:25 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2013-11-26 09:23:02 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-11-26 09:18:39 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2013-11-26 09:18:09 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2013-11-26 09:16:57 708608 ----a-w- C:\Windows\System32\jscript9diag.dll
2013-11-26 08:28:16 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2013-11-26 07:32:06 1928192 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2013-11-26 07:07:57 2334208 ----a-w- C:\Windows\System32\wininet.dll
2013-11-26 06:33:33 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-11-19 10:21:41 267936 ------w- C:\Windows\System32\MpSigStub.exe
2013-10-12 02:30:42 830464 ----a-w- C:\Windows\System32\nshwfp.dll
2013-10-12 02:29:21 859648 ----a-w- C:\Windows\System32\IKEEXT.DLL
2013-10-12 02:29:08 324096 ----a-w- C:\Windows\System32\FWPUCLNT.DLL
2013-10-12 02:03:08 656896 ----a-w- C:\Windows\SysWow64\nshwfp.dll
2013-10-12 02:01:25 216576 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL
2013-10-08 12:50:37 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-05 20:25:35 1474048 ----a-w- C:\Windows\System32\crypt32.dll
2013-10-05 19:57:25 1168384 ----a-w- C:\Windows\SysWow64\crypt32.dll
2013-10-04 02:28:31 190464 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll
2013-10-04 02:25:17 197120 ----a-w- C:\Windows\System32\credui.dll
2013-10-04 02:24:49 1930752 ----a-w- C:\Windows\System32\authui.dll
2013-10-04 01:58:50 152576 ----a-w- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
2013-10-04 01:56:25 168960 ----a-w- C:\Windows\SysWow64\credui.dll
2013-10-04 01:56:00 1796096 ----a-w- C:\Windows\SysWow64\authui.dll
2013-10-03 02:23:48 404480 ----a-w- C:\Windows\System32\gdi32.dll
2013-10-03 02:00:44 311808 ----a-w- C:\Windows\SysWow64\gdi32.dll
.
============= FINISH: 22:47:04.97 ===============

Finally a reboot got me going.

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Just prior to finding this site tonight I run full scan with malwarebytes and removed found 10 malicious items and quarentened.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.12.28.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

12/28/2013 8:02:40 PM
mbam-log-2013-12-28 (20-02-40).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 437514
Time elapsed: 1 hour(s), 36 minute(s), 23 second(s)

Memory Processes Detected: 1
C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jbrmon.exe (PUP.Optional.MindSpark) -> 3096 -> Delete on reboot.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 8
HKCR\RadioRage_4j.SkinLauncher (PUP.Optional.FunWebProducts.A) -> No action taken.
HKCR\CLSID\{33119133-0854-469d-807A-171568457991} (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{13119113-0854-469d-807A-171568457991} (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\RadioRage_4j.SkinLauncher.1 (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{03119103-0854-469d-807A-171568457991} (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\Interface\{23119123-0854-469D-807A-171568457991} (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\RadioRage_4j.SkinLauncherSettings.1 (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
HKCR\RadioRage_4j.SkinLauncherSettings (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.

Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|RadioRage Search Scope Monitor (PUP.Optional.MindSpark) -> Data: "C:\PROGRA~2\RADIOR~2\bar\2.bin\4jsrchmn.exe" /m=2 /w /h -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|RadioRage_4j Browser Plugin Loader (PUP.Optional.MindSpark) -> Data: C:\PROGRA~2\RADIOR~2\bar\2.bin\4jbrmon.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 4
C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jsknlcr.dll (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8LWKMR6M\RadioRage.exe (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jSrchMn.exe (PUP.Optional.MindSpark) -> Quarantined and deleted successfully.
C:\Program Files (x86)\RadioRage_4j\bar\2.bin\4jbrmon.exe (PUP.Optional.MindSpark) -> Delete on reboot.

(end)
 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please go ahead and run through the following steps and post back the logs when ready.

STEP 03
Please download Malwarebytes Anti-Rootkit from here

  • Unzip the contents to a folder in a convenient location.
  • Open the folder where the contents were unzipped and run mbar.exe
  • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
  • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
  • Wait while the system shuts down and the cleanup process is performed.
  • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  • When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt

STEP 04
Please download Junkware Removal Tool to your desktop.
  • Shutdown your antivirus to avoid any conflicts.
  • Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next reply message
  • When completed make sure to re-enable your antivirus



STEP 05
Lets clean out any adware now: (this will require a reboot so save all your work)

Please download AdwCleaner by Xplode and save to your Desktop.

  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Look over the log especially under Files/Folders for any program you want to save.
  • If there's a program you may want to save, just uncheck it from AdwCleaner.
  • If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
  • If you're ready to clean it all up.....click the Clean button.
  • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  • To restore an item that has been deleted:
  • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.


Then..................

Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.


STEP 06
button_eos.gif

Please go here to run the online antivirus scannner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked
  • Click on Advanced Settings and ensure these options are ticked:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology

    [*]Click Scan [*]Wait for the scan to finish [*]If any threats were found, click the 'List of found threats' , then click Export to text file.... [*]Save it to your desktop, then please copy and paste that log as a reply to this topic.



STEP 07
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.


 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.01.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

12/31/2013 6:44:17 PM
mbar-log-2013-12-31 (18-44-17).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 251636
Time elapsed: 19 minute(s), 45 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.128000 GHz
Memory total: 4081606656, free: 2426785792

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.128000 GHz
Memory total: 4081606656, free: 2457296896

Downloaded database version: v2014.01.01.01
Downloaded database version: v2013.12.18.01
=======================================
Initializing...
------------ Kernel report ------------
     12/31/2013 18:44:10
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\MpFilter.sys
\SystemRoot\System32\Drivers\PxHlpa64.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\igdkmd64.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\bcmwl664.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\drivers\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\Apfiltr.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\DRIVERS\Impcd.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\drivers\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\IntcDAud.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\dc3d.sys
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\point64.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_msahci.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\drivers\BCM42RLY.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\system32\DRIVERS\CtClsFlt.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\normaliz.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8004bc5060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa80048f8060
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8004bc5060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8004bc5b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8004bc5060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80048f8060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 8B5072E7

Partition information:

    Partition 0 type is Other (0xde)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 2048  Numsec = 204800

    Partition 1 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 206848  Numsec = 20480000
    Partition file system is NTFS
    Partition is bootable

    Partition 2 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 20686848  Numsec = 122880000

    Partition 3 type is Extended with LBA (0xf)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 143566848  Numsec = 481572864

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-625122448-625142448)...
Done!
Scan finished
=======================================

Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_0_1_206848_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...
Removal finished
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Moore on Tue 12/31/2013 at 19:14:27.80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

Successfully stopped: [service] radiorage_4jservice
Successfully deleted: [service] radiorage_4jservice

 

~~~ Registry Values

 

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00A2B7C6-7487-4B99-9F6C-1FDF57FE130B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{10273591-D084-4328-A7D0-49E051FCDE7B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11D4B723-18CA-48C6-BA13-965488F19A70}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C35AD63-AF1D-4E21-B484-B6651A8EFCF9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{434FA5E9-253E-4BD0-ADB6-7CE4CEA114CA}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{53855564-CF81-410C-9C1C-321C7E067816}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6562E272-88E1-4DFF-8FF8-FE1A05323D36}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7E7ABF2A-8C44-4562-895D-DBCA3CDDD1A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9638B7D6-11F5-4406-B387-327642A11FFB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CA41198F-C3C5-47D8-99E1-1AB199E81723}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D740AD89-BAF4-47D5-9B5E-343D30F07A7A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DFEB941C-8B58-4899-97C3-88FE394E1285}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E23760BE-23A3-4CEF-9304-66AF079F53DB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E6AD866F-EA06-476A-8432-ED943683FAB1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{ECEF0D95-32FA-48D3-8A2D-D6453B5B7361}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F69FE1BE-09C3-460C-AC89-8CCD9D3DF1CC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F706E19B-6C14-4272-BA98-2F16636A898D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{0978C5FA-83C0-4118-A54F-99DACCEECB8C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1ED65BE2-AE84-46CB-8EA6-1C2B86ADF768}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1FDAD7F1-B87C-4E79-9150-DE235FF80B3A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{395C94B1-59E6-4C65-8AF2-0F6763BC70A6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4A50E810-71EB-43A8-A665-19ED8CCD1630}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4DD9EB5D-8657-4856-A804-535841B09D73}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{569A9014-22E3-4F11-A243-CA4E3D95ADED}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{597494DA-C59F-4EDF-B2D1-CE137E2DB9E4}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{5E5E0B49-1A81-4ACC-BD6B-FF5F4EFEF01A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9E18E695-C9AF-4369-8CC3-93141C2928AF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{B872D222-3F52-4CD9-A4BE-9D69EE4F293D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{D0E90465-CF35-480D-B520-E1E3BDE802F5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\radiorage_4j
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\speedypc software
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\radiorage_4j
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\fixcleaner
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\radiorage_4j
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\speedypc software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.dynamicbarbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.dynamicbarbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.feedmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.feedmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.htmlmenu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.htmlmenu.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.htmlpanel
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.htmlpanel.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.multiplebutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.multiplebutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.pseudotransparentplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.pseudotransparentplugin.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.radio
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.radio.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.radiosettings
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.radiosettings.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.scriptbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.scriptbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.settingsplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.settingsplugin.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.skinlauncher
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.thirdpartyinstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.thirdpartyinstaller.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.toolbarprotector
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.toolbarprotector.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.urlalertbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.urlalertbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\radiorage_4j.xmlsessionplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44DB423D-A0DB-4664-9477-CCDCEB7CD666}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53855564-CF81-410C-9C1C-321C7E067816}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A661D4DC-4BD8-48FC-964B-A24AB8157DE6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5731AB1-8566-4441-AEFB-9AFB2EEA63D9}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\radiorage_4jbar uninstall firefox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\radiorage_4jbar uninstall internet explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{15d2d75c-9cb2-4efd-bad7-b9b4cb4bc693}
Successfully deleted: [Registry Key] HKEY_USERS\.DEFAULT\Software\bProtector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220022502260}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660066506660}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220022502260}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660066506660}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660066506660}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660066506660}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{110a9ea2-8810-4c04-b916-cfd4e9427fec}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{110a9ea2-8810-4c04-b916-cfd4e9427fec}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48909954-14FB-4971-A7B3-47E7AF10B38A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5848763C-2668-44CA-ADBE-2999A6EE2858}

 

~~~ Files

 

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\bprotectorforwindows"
Successfully deleted: [Folder] "C:\ProgramData\speedypc software"
Successfully deleted: [Folder] "C:\ProgramData\w3i"
Successfully deleted: [Folder] "C:\Users\Moore\AppData\Roaming\drivercure"
Successfully deleted: [Folder] "C:\Users\Moore\AppData\Roaming\fixcleaner"
Successfully deleted: [Folder] "C:\Users\Moore\AppData\Roaming\speedypc software"
Successfully deleted: [Folder] "C:\Users\Moore\appdata\local\radiorage_4j"
Successfully deleted: [Folder] "C:\Users\Moore\appdata\locallow\iac"
Successfully deleted: [Folder] "C:\Users\Moore\appdata\locallow\radiorage_4j"
Successfully deleted: [Folder] "C:\Program Files (x86)\fixcleaner"
Failed to delete: [Folder] "C:\Program Files (x86)\radiorage_4j"
Successfully deleted: [Folder] "C:\Program Files (x86)\w3i"
Successfully deleted: [Folder] "C:\Program Files (x86)\wiseconvert"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0027C7F0-ED97-477D-ABB1-AF35585E2FB3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0055AEEF-01CF-475B-8CA6-D96A523FADA5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0057E566-8D29-497A-81F7-F03BE270E647}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{010B0D6E-B886-44B6-9B00-484AE3B12CD9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{01449933-A6EC-48B1-A02E-26A078287E87}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{014E270A-568C-499B-9FE8-74A5765CFA92}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{014ECD12-241D-48CE-B3BF-5A9EBAC8E0AC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0158CB0C-1BFD-4A4C-A82D-C3F9C65D5171}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{01B12CD0-35B9-477D-B40A-51EB7CB756CE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{01B285A6-0E73-44F2-A5A9-AD5FD7172F33}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{01D26233-F71D-4ECB-B8F6-9D3535C230D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{02110C31-4299-411F-9178-FF3DC0E8E16B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{023226AD-6E7F-485A-85FE-C8C7C2DC08D8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{024C955A-72C4-4AAB-858A-09A22F9FE64B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{025CECF6-8404-4069-A170-F97A1A4B0BC8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0269EEAF-9A42-46B9-8C4F-261E6B98D60A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{02A9A238-1F2B-4DF7-9DF4-071182ABFD38}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{02DD2041-6CE7-4700-BDA6-1989AD4F16DC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{02F2D355-BA34-44F4-9216-8A11260EAF7C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{032D8C14-A323-4E50-B51D-B45868F50E33}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{03AC2A3E-237A-4B51-85F7-D10EF1BD7573}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{041679AA-596A-4965-867F-1E8C716B26B6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{042AAA01-AA5C-4C45-A651-93A2D5868218}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{043A411B-7CA8-40BC-8AFE-09ED0015848A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{04773064-EC80-40A2-B076-4BE04E90DE04}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{048AA3AC-463E-4ECF-AA33-F22104D7378C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{04A5F990-F5A3-45CF-A577-85A7D27C8217}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{04D20C74-ACAA-4761-B19A-14BCB3FA8878}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{04F9375E-EBEB-40A4-9E7A-7864BB3E1650}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{05273737-3EE9-426F-8D2D-496163112920}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{055A2397-C9B0-489F-9B89-56EA080F240F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{057944DA-0E4F-4EF0-A5A7-378AE76FD0DD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{05D4172C-3BF4-4A37-A429-7D329357D171}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{05D62B28-AEE6-4C98-833A-C115C019DC74}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{06B66B8F-A006-4258-9530-3F1A58084303}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{06F4A3FF-5867-4CF4-84E9-93BC40720800}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0723DB13-4AC3-498B-9E50-B72EBD6805DA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0766A880-F824-480C-8896-622DF736E597}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{07B6DC10-447A-48BC-9887-06B94F853AD9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0811F079-278F-49A3-B86B-0D4AB4A1FD90}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0819869D-DAF1-4BC9-953B-36130D8A59E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0870D9CB-44FF-4ACB-89D3-8C410C59C790}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0889D648-7071-4B36-A58F-B8E78F0D5599}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{08928D10-4764-4447-A956-FEE99DA3D3E8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{08AFC5DD-5A14-4AA5-A186-0B17BF8A3A45}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{08CBBAE2-D10C-4576-99BB-A0D1B4DA0269}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0916A47A-97E9-4E31-A291-F79100BD98E3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0956CCED-21E3-4032-A5CF-242A41B89277}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{09A2EAE8-FA1F-419E-85FE-5931468DF777}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{09C0B84A-5828-493F-A83A-4A14B1D84941}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{09C52953-2FE5-46F2-B1CA-C1A2A5943934}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{09F7585F-F7F7-4701-80E1-8CDEC6C7FA2E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{09F93690-AC72-4308-A7E2-C9873AC445A7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A0732F6-E55D-44A3-B913-703FA737A32B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A102CD8-CB49-4AF2-B181-8C0C7E3A9DA9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A57EB2C-AC29-413F-A6EE-19B4C2097D3F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A67396E-3E9A-46E3-8CC6-CDFA96BA9AE1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A969F76-D241-4A36-96BF-1A50098E630E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0A9BAE70-DD68-49C3-BC6D-66D4902220B2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0AB442A5-5DC1-463D-81AA-9B6F04DBF0C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0AF06215-297F-41B5-8181-BFBC0B964B9D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0B56C96F-D1D5-472E-AC4F-7894880924E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0B654AA6-9C1C-455E-8358-D7B93DEDAA59}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0BAD21D5-0BE3-4382-B4C4-483091A3269B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0BC607F9-CBAC-43C5-976E-F205B92CE395}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0BEA5DB4-759D-4D8F-8447-F7AF48FD32B2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0C422334-32DB-4455-BD1D-C5D7E2760477}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0C4C048A-ECB6-4291-B04B-E88F8E0F64C5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0C4FC55B-4D88-4800-8891-776FB4243799}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0C72C8EB-246A-4724-96AE-448723FC1C0E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0CCD96D8-5E4A-417C-835D-DB87F49C45C3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0D2F25A7-417F-4535-A561-4373E4285EAF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0D68AE61-A10C-405A-A9A5-DE04F1551A21}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0D6D90FE-FC61-4426-A356-D8E1B224EC4A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0DB5D44B-6CEF-44FB-9FBB-ABC6AB0AE349}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0DBF46ED-8FEB-4D77-8B4C-AC57706AF7BA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0DC7E3EB-CA7F-4DD1-BAB7-6DA9CBBB6EE6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0DD60D3F-FEA9-4F0E-AE5F-D2A84AF1106E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0DFA133B-B36E-438D-9850-4EB36FA49C38}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0E291E3A-28B4-40EA-A2FA-B7BFD1AD7FCC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0E2C5435-4495-417C-93CA-670748E31A5F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0E2ED01D-C979-4211-8F94-625682EC40AD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0E33FF57-90A6-433A-AA0A-96A4DC0C40BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0E73F73A-976A-40B3-9DA1-260D21F7CFA0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0EA315ED-C272-46B6-BCCF-BBF866B9229B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0EFB3FD0-3C6F-47B4-9A34-7A17E9C3E283}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0F24EDEE-422D-4DF6-B815-20746F96CE86}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0F25E791-0744-492E-A093-588594F9B735}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0F2680FA-4061-4FC5-A5D6-DD4AF0EFE463}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0F591E7D-582C-4E79-8D8C-0C2B222ED706}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0F7A300D-1F1C-4EA8-9FEC-8FB091015B41}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0FABBF43-56BC-465C-97AA-E03B23A3EB1D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{0FC3E111-AE9D-4E97-A984-55284FA30D9C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{10231853-52CC-41D9-A5CB-E6C359C3BB7A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{10454AB4-1B07-4629-985B-5C2497E11F00}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{109D73D0-9110-439B-BBEE-89C81207E422}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{10A1D230-08D7-4ABE-91AE-8145B93AEC1C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{10EBFF3E-1607-4AF4-A76B-68C059F58937}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{113A8987-E2A4-4F76-938C-091459920C3D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{11C6FE6C-4B12-44DA-8229-2EB113D478BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{11CE4C78-B494-4487-A1B7-B344A551AD84}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1231B378-2C9B-4E49-90C1-7DFC5B3BD6AA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1243CF90-34DC-4FCC-B426-B7F302705F7E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{129C6655-649B-468A-98C8-E39D1A886A11}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{12EF52FD-A682-4DDD-8F64-281FEC802E75}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{12F4D0FB-CD87-432C-9221-D078351D0528}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1398E85A-4DB0-4572-812C-CBD9E25C96E5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{13BC5426-A3B5-44FF-B1F3-8C07111B0A04}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{13BD9AD1-3705-4F84-A4D2-DBC6DD2704FA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{13CC7549-670E-4989-AA85-65675EB874F4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{13DF5050-3D24-4522-AB17-7482B3E61A97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{143E8506-E416-4149-9D80-17B8048ACB38}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1471694B-CFFB-4B57-B9A8-E62B74C1D625}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{155A13CD-5002-4E60-8E69-9A3F581AE124}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{159DC3FC-BAE2-4F16-8755-3ADC50229542}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{15D83F9A-0C36-44EA-B533-EE8F01AAD34C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{160FD7C9-416D-49A4-8DFF-A23A4353ED71}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{162DBCC9-FD3C-46E7-B0E1-E2AD5E86AF68}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{163AC88C-A8C3-4CBC-9DA2-BB63C9180234}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1690C574-CFCF-40C5-A259-AECF3C4FB14F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{16E46F3E-6C06-4C43-99BC-C0C07091F361}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{16EDBD55-2D5E-4384-83B5-326A1D1B8859}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{170ECEAC-C2AF-42D3-A684-6BB1248B6682}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{175E1FDB-6890-489E-B93C-621F62E5FC93}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{17714676-34BA-4D76-AFC6-F3779452F521}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1787C8B9-2B11-46BB-8BBE-2461AAA0E748}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{17C91A31-BBB5-4F9E-91F5-CD8072904087}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{17F8E3F3-1B0D-4472-A1CC-DBBDE8553E60}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1812A19D-8B27-472E-8456-1C80FA4E7E23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{181770A5-E14A-45E9-96A1-3BDA79E9946E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{192E1DA1-4F34-4B77-8BF8-D4288A8A94A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1935DF67-2AAF-491C-BE32-BB6301220A73}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1957B1FD-A119-4E27-AB70-FF5617D24A2F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1995D0C3-EE8A-46B3-BB3C-0628EAF4910D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{19A2CBF4-4404-4A13-A356-F5779D853E93}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{19C3ACE8-28B9-43DB-A248-9F5FDD121AA9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{19D7E8D8-F5F0-4662-9787-CF7F726EE49D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{19E2D001-FE30-42BB-A549-91727729FD9D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1A24D051-071D-4713-9F91-1118DF1F240E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1A30B98E-894B-44E7-816A-3869B20BA8EC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1AA8542E-710C-4EE2-8758-5E2EDE7D31D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1AEF55B5-1535-4F6E-9C6F-E5F147E11F43}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1B055577-BB1C-4F7B-B09A-E076C22BEF9A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1B13EE9B-EAA1-408A-8488-3E9962744BFE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1BA45782-407B-4F6B-9302-EB1D198F1AD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1BBA6378-966C-49AD-9BF7-50DD51FEEEEB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1BC53DEC-841D-4A9C-B162-2E321C3424E7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1BE6C650-D1AD-47BA-B4F0-E22064ED9C67}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1BFBD2E8-57D1-44B2-A8AD-4F9EF5DB0475}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1C1333D4-F170-47D6-9008-E274CE2A4902}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1C134BEC-B485-4632-BE0A-62871FAB73E3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1C3CD6D9-B4A7-4C0B-8179-88257A8BBFE6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1C43FA72-924C-4A64-A84D-A9C09FDF8105}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1CF5FB6E-F891-49AD-8273-AD1BA8157EF8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D3633E8-DEE5-44F5-BABC-0E65BBE8568B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D4240FC-F030-4C2E-A5E6-6B6F9904D77E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D45ECAF-4DA4-4AD0-9DB4-1F45B8FD870B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D5FBD76-E2F3-4EC1-A74A-49963CF87531}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D68481B-4FC7-46D0-B1D8-622A17FDB7D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1D73A1C2-1ED0-42E3-B3E1-2896C1971B6C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1DE433E9-0A44-4555-91A7-498D754A0F14}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1DF57A2D-343C-4A00-B7C0-710E1AD8D062}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1E27ACA1-252B-49FF-90F2-84CE8E9A61DB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1E5F3489-0486-4191-BE34-84520AE8D6FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1E5F8FF1-8E4C-4DBD-954E-C573C9B9DD02}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1E926E7B-E0AB-44D9-8230-97426598275D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1EAC97CC-6AE5-4DE4-AA0C-54A93A0FC4EE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1ED9B129-6305-4082-949A-0AAFF6A3A98B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1F18A64E-6AB0-4F8E-A6A9-EFD2DE2AF0B8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1F1C5628-5598-4B4F-8B83-82CC8B2EB960}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1F8A8C13-770F-4E40-834D-0AA03692B498}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1FD3D749-C0A2-47DF-AD4E-AC638E3C0369}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{1FF23267-0BCE-4059-BF25-3878198EEAE6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{207233AB-FADC-4052-90E6-872C9BEFB376}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{20F7352A-CEAF-47D4-89E4-1AEBEC70B0D6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{211B538B-186D-4782-B8CA-6C4C426E8A23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{214DE44E-5A93-4BB8-87CE-959D7DA07BC4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2164B2FA-23C4-4A68-9B42-2FB02A809C3A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{216CBAED-1FF0-4CC4-AC50-29FF256337C3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2174EDC5-DFD9-414D-A976-3090D61B9699}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{21818A15-3B78-404B-BECE-99BEC9BEB3BE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2210A6CC-7B00-4A2E-BDE8-88BBC51F8BE9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2214D6D3-336A-4DF1-9D61-3A8122D6E920}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{221B6BAB-89D1-4439-8360-7EF5979FA4CB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{225246DB-42B8-42F5-922E-EAA4E1A18812}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{22781484-163B-45F7-B5F5-59A044902E8B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{228973F7-99EE-490B-88C9-1DE42AB06741}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{228FF7EF-2745-4507-99C7-7FD4C4D24F0D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{22924C55-7290-4AA4-A3F7-A5414EBA475E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{22D109D0-53DD-4B0A-9124-1E11485AAEC9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2309C2D3-5649-4B3A-928A-42061AC90DAF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{232F64A5-548B-4E63-BDBB-449714C4A47F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{23322FDB-4A0C-458F-A884-8B448773C57B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{233B30BF-6F48-41B6-B9EB-4EB36108D507}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{235D53CA-026E-419A-BDF7-4B0E021E7C95}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{23973C84-3FE5-4DAA-BFDD-E490C80373DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{239DB501-B62C-49FC-BBD5-840851CBD87F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{23F32556-45DF-4C88-AA5E-A1F35B9242C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{23FE743E-726D-4241-9F3A-2B7A045E46EB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{244ECDA6-4BEB-41BB-A08B-6B7724B7CF90}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{245604BD-C4DF-4F47-8513-6D19E47D7A10}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{24BF6E8D-5C2B-48AF-A09F-5E7B36DC8A62}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{24D8592F-1CF8-4C1E-B347-48C62EC5760A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{251084BC-B630-492D-A9B7-C21CEB9F1C39}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2510E90A-4C51-4E25-8DB9-AC156469A8C7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{251204A7-EC1C-4E3B-B744-64AE9BDCD95D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{255BF33D-D75A-46A7-B566-191CD822977B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{25DA22C7-0FED-4722-9FB2-AB977661DEF5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{25DB2C51-4BFD-47D3-9B4E-B606148CF010}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{25DC96C3-C8E7-4849-98AA-E0D25A5A4A57}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{25EFFF81-5B27-4C2F-AB15-ED8A5B470AD8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2606F962-3418-4969-8FB4-EA3AB2B00450}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2632F99E-99C7-46AA-B5BB-56B66B5CBAEC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{26CD96D9-817A-4B0E-A58D-95FA6B3B39A3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{27491020-3978-453B-81D7-BF0239560945}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{279376F6-EE57-40ED-8B42-43AD44719442}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{284F08C4-B457-47BE-8137-94BCCF84C103}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{28D2BB99-66CB-40C2-80ED-5309231A1E32}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{28EFEB57-3F0D-43BB-AC92-79FBF4BBAAC5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{290F6211-C156-4EE3-9A87-AD3A56930BA4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2957F3E6-51E3-4A1B-9C81-CDF35ECC1388}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{29BE9268-750B-4997-81C6-2C6CB7673B43}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{29C20217-09A0-4027-9C00-95794841D329}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{29E53CD5-7A93-4A7E-95FA-8AB803F7E016}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2A642C8D-0ACD-41F0-8D2F-769CA2FD2EBA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2B21701F-882D-48EF-8914-174F9C1FD5CB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2B95A35D-39C6-4281-9C10-0A5964E6A385}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2BFAE25E-353E-4540-B8F9-3D82A305E4E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2C160FB4-EE72-4CA2-8F14-78075E9C3DB9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2C32CECE-F657-4283-993F-8AFAB2194922}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2C41654E-E125-4BBA-A345-EA6563B2179E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2C4D5156-BBC1-4868-99D8-3BB3366EA113}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2CF2F359-62C9-4583-9749-D95F9FC9F0C3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2D5E30AE-9368-4B8A-8A3D-98F0C98700D1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2DB20EB5-4C50-4C5A-9269-40B7B471BA5D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2DCAA7C4-0F09-437C-BA87-12C21C57BFC1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2DF4D2D6-A5DF-4919-84C5-B4BBCA8370D8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2E44F25C-3085-4860-BFBE-B3A5DBD07401}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2E45166D-9DF3-47A7-972B-8179D13BA11B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2E4FEB0B-1CC0-426D-864A-A6DCFC9DD311}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2EC412F2-9D05-4DCE-9695-972642172CFA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2ED8F6BF-5039-494C-BD39-BF511678E1BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2EF2C104-C996-439F-AD20-7C29ABC12E71}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2F15B32F-09B7-485F-A0BF-2805F7080C65}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2F8D5AAB-2893-410F-B819-67CF97F3491B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2FA79AED-84B8-45A1-8B65-00A6334C159B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2FB994FA-1D5A-4542-92D0-5D6D45A5822A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{2FD9A8BD-AF31-4E73-8996-399EA72C2920}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{30438C71-B48C-4844-97C4-BF6A4E410612}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{30514A8F-2906-443F-80ED-29A4ABDFD254}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3136CC3D-418D-4D95-88E8-34840145EBE4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3148C99A-1F36-4FE8-A5C7-B2F55923F9AB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{325FCF1E-CEA2-4EBF-BABB-971BF52BDDFA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{326E327F-D496-4824-A5DF-0D71D5B3B615}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{33663A56-7915-4C31-8208-E151E49AE4BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3379147C-ADAB-4AAD-AE8F-3C43AE1242C4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{33965940-F9B0-461A-9229-CC8887329746}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{33AA3475-3EEA-4DA5-BAD0-DE2BCE8ECE81}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3405DA3D-5B69-4B21-AA72-D008CAF9728A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{340B8FB6-2890-400A-B78A-A2FF256E31E7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3490E762-8E0F-475B-BB18-12D434A3C038}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3492AEFA-C6B6-48BF-A95D-1AFFCD129DA2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{34E4842C-512D-4A82-8E30-AE999062A0DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{34EAF447-4A3F-4A01-A343-8F0F43A6669E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{351350C3-56BB-4548-87E5-4324AF2C10E7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{35379773-3D7C-4315-9047-7431FC4FE24A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{356A0A9F-A35C-4448-83E5-F54D72CFDEB7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3581673D-D019-424A-903B-3B2C4B3CCEF6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{358CB595-FACA-4C66-BFE4-435D15F31D38}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3619322D-DFE2-4852-8006-DB25D48DDBAB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{363F7873-4932-45EC-AE7D-7F3F731D4CC6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{36590473-E1E6-45D2-A738-C02F8C7D3E2C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{36B98BC3-9CB8-4025-8FAF-786131554E7E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{36C65B2F-6007-4706-8C4E-6939BE1B5A29}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{36CFE170-07A0-42B1-B034-51437EEBD599}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{371A0F6D-6C97-4A7D-B7F0-4B652F4F5BA0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{375CA5BF-2903-4E4B-A959-D68E2F731B66}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{380D5A3F-B9C6-4537-B1B9-926EE3649D82}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{38274EC9-B64F-4B27-8FD0-854C58D35FFC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{38645A6F-54C1-4D65-948B-934B496C77AF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{386EB55F-5B11-4243-985E-6B93F9CF80AF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3893D308-7722-4AD8-BE34-C393C1D2D6B6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{38CF3223-3E9A-4B14-86A0-6EB145A2AECD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3912FF3F-8C5E-44D8-98AE-61EBE7444581}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3931C8A0-3367-4B68-986C-47E2A78786A0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{394E0212-748D-4BD4-9F6C-BE4F8AAC2328}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{397A0C20-93A0-429C-9C14-18AC3EAD8CBE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{39A6E6B3-1CD9-4798-AB53-329DA377E85F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{39BCF03E-B89A-4965-9278-94BF8E1B2E9A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{39F9B8F3-2EC1-499A-B1BF-DA59639A1D70}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3A0B8EAD-1466-4DEB-85F5-A8A0B50069EB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3ADC0A1B-E3C5-4EB7-915D-95771CACE10F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3AF87B42-863D-4352-A3A6-99A3BB2F2A15}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3B1E6650-71F5-4E04-80E6-C250988D0FF0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3B5A3AA1-B52A-4A0C-A7E1-BF0D31BB4D07}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3B839F23-0E2D-4D23-9543-3D8C4DFA2D23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3BBAF8BC-AEC2-4A6D-AB8F-916FA3AEBC87}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3BBCCD6F-0B38-43CB-B19E-2843384AD796}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3C10ED33-30FD-488A-B6FB-D363C36FE01E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3C77B1D8-56B8-4512-98A8-FF5B353E4ADD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3C8BC0FF-6732-466C-BD76-81879BBE257F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3CC9DC2D-E5DE-41A0-B193-938CA5FA2950}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3CCF1DD7-BF6E-473A-B2C1-5475BB8E7201}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3D1A425C-0D6A-4B9B-BB2D-39EB499D5B46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3D3C77B8-632B-45BE-B33C-2CF4F71261FB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3D4093B6-B2A5-456B-B516-3095DE623F99}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3E0F110A-70D1-4234-802E-B60759717AF3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3E3A5A44-E08B-4A54-A09D-48942E3DA4F6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3E75CDE0-B5F4-4AB0-8DB4-CDD7590412A4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3E85C856-7956-4537-ADE5-BA9F7105C183}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3EC216B1-22C0-40E8-BBC1-2584393E32D5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3EE3CCBB-85DC-4E8E-ADA8-D1B57BDE5131}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3EF67688-12D9-4D2C-9FA3-2594CCC2C7D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3F127D04-CF44-4FD6-BB63-1305952B7FF7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3F428693-FA10-4424-AF7C-9EA600F4F248}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3F4511B7-727F-45CA-9C77-8030C9A455B9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3F452E49-3A43-4CD0-ACC9-7B55BA537090}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3F5CFC17-CCE2-4E3A-B6D5-E92EED63C444}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3FE9A02B-60CC-4B70-8B82-1528CFCFBC39}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3FEE5B4D-A6AF-4ED3-A852-B20C9733963B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{3FF34903-EEAD-4F66-8C96-ECA37A001470}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{400AEAC5-D151-4A2E-A2DE-95DF2D12AAB7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4037416D-DA9F-43CE-8AF7-87AB3B492556}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{40AD1A66-9687-4155-AC10-002DDF7B72FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4128E6CC-B6A1-4201-8115-9223444E6227}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{414746F0-95A3-4B90-A52C-EE7E6A3D15B5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4176E6BD-866E-4E36-AAC8-9FE22B41B0B4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{41AB24EC-4738-4EF4-87F5-EFE309C4C008}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{41F25F30-D8B2-413B-B402-5F4943B06A3A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{41FD8993-9965-4442-A38A-608280C21622}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42AB4EC7-6D7D-4490-BC08-3AF0E0966F8B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42AECE3C-70E2-4A5E-B821-7DFE891A9655}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42C77D8B-A186-405F-A771-DD396685E9F2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42D38D3C-D6A3-4B68-8732-86D8B056CCD7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42D9BE95-FC69-4174-AC98-3861F996F7BB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42E207E2-1FA8-4E0F-8988-77ACD8368689}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{42F4C03E-0F13-4C9A-A66E-DB7809BFB08C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4371E838-5D06-4CC4-A274-9715CA1782E1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{43DE118F-263B-4AA0-84B4-05F882346D46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{43DFD54E-2578-4691-8F6E-C27A748E566D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{442B2547-53D0-402B-A361-0B0F3F16D201}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{444A4CD2-1F80-4A8C-B946-F08B4EE11C5C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44851BB5-FDAA-413B-BD08-5A3C4144BC64}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44A5E93A-6056-4BC1-BEAF-83DB9F4C00E4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44A828F7-A2E1-4AB4-B9D5-1AC69CC33118}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44CCD948-0415-4E5B-88C6-45D87DAD6A3F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44E5FAE3-AFCE-4573-AE82-E1E7FC98AA51}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{44F118C0-B726-4204-BCFE-08EB905BF69E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4516BD78-0495-419F-AE46-ED6653CE5404}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{45588704-3383-454C-B105-73717508F479}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4593DC68-2A94-4C71-92C9-2A19065384DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{45995985-3138-4F4F-9574-9558D6A51FD3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{459A5960-3943-4B50-BE7A-08B9BD1A5711}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{45C6220C-2E1F-49EB-9356-E2142C86C604}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{46532E40-692C-4CF5-B3DE-9B0DCBAA0361}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{46658242-DA96-428A-B82C-C650A175FE1C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{468C55A5-9583-4114-B12D-7920BBF5E48A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{46AD7DEF-C6D0-4E2A-95DB-E23EEB1611C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{46D29645-B6FA-4708-AD2F-7FDE50FEA9B7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{46E0CEA0-2A25-4F60-8579-59FD066A2D16}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{47297B29-E0FA-4D65-815C-80C838A97963}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{47311D81-09F6-402F-AB78-142CD90D8BD3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{47418298-99B4-446E-A2F5-3711C0B14E07}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{47749343-D803-4360-A4B5-E29FB94982E4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{477E3884-1823-48CF-BF4E-1FE7B2D3D212}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{484E7C38-2E84-42E4-A0A3-44B516C6A012}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{48515A85-64F5-4389-A7B7-B7F342DF39A2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{487FA2D5-4A9C-44ED-9B76-07AEC087B488}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{489643A3-6C8A-4684-A468-670CB770A669}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{48DAE209-4C67-4ECB-9D4D-CE7D8F1B6C3A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{48F45D7C-22A7-4D0D-A64A-2547911F1E45}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{494568AC-F639-44F3-9DEE-E79FB3303EA8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{494B3B4D-8650-4ABF-9935-E0BC394DD71E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{495DF172-14AE-4013-93F9-EC1EAA00E18C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{499D0BD6-2A0A-4C67-ACBB-EA2AFDF74027}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{49AC98E5-24BA-4637-82F8-54DB9B441206}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{49FDBB1E-741A-464F-AE7F-786E0E7D19BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4A3C8DBF-4F75-41ED-B060-C21D58B24A9F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4A842D4D-73EA-4F17-8741-343B8D423FAD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4AAD565F-CCA3-4204-8C5B-D11913EAA530}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4ACCB3EC-1D2F-45E5-81F1-E7B04FCE0221}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4AF83731-1308-453E-860B-EC1828DF805C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4B07DAC7-BAD8-45F3-BB0A-F5A2535DB083}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4B1D82A7-2E5C-4EFC-A791-E3A2B5A45BD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4B909457-97CC-4FB4-A64B-2ED6CC62E492}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4BC3A8AE-DAE4-4074-815E-8C35E9CE85F4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4BCE67B3-84C5-4259-8D6E-8E8071A23672}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4BF44C78-43D7-4124-9335-FFDE5FDBF19F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4CCA1B6B-CE94-453F-87FC-E1552C5145C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4CDBB1A7-8D9B-411B-94F4-571EECFB536A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4CE31655-179A-462D-8CDF-774B35F658DD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4D290AA9-9186-4373-B98C-1FE94C48E41E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4D59C533-0181-43F5-AB46-21B2ACE559FF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4DB91A48-AE3F-4D7B-8BD7-AFF429326F6B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4DE49383-28E7-4E89-9EC2-DBD0E981800A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4E1730D7-CF5B-4E37-95D5-E761CADB4F23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4EBD63E6-A3D4-454F-8D14-4CF369C45D4B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4EEB64A8-A3E8-43C0-8C35-35DEC6CE35C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4F30B7D3-AF27-42D5-8D3B-69AD8F8BCFF9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4F7F9625-E01C-4BBB-985B-CF158213BB3B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4FA9ADAF-16DF-47B1-93A4-F6235CD6D336}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{4FEF7643-E506-4C23-8CCC-42F8F49A9C40}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50278E8C-9E0B-4AFF-A7EB-C7F605827088}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{503B2264-6C14-480F-9A72-081E27745BF7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{504A3847-8A39-4BD0-A7E2-52F48A9696F4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50A8F335-CB63-4F9F-B0C3-B321AEAC75E0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50B3E5FC-B140-46B7-9931-B51AFDFAD2D4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50BAAD39-0FDA-40F4-8EDA-007BBF5BF3CC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50BB3E72-04F7-4993-AF3E-4776434FEC65}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50D50F62-2201-4FFB-8CE2-F6FE37B0BDBE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{50FC944A-662D-443E-AEE1-A85EE0399042}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{510DCBE7-26D9-41EC-B930-F65F3DEB1895}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{51165B57-5929-433E-9667-2ABC2B64B87C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5165CA02-4FDF-4062-A2EB-0F3014CCFA5E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{51BC4C5F-9890-4842-A42D-6CD170D2DF12}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{51D0845B-7B2C-40D9-8088-0755573CFF30}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{51D79C67-8F19-44A4-A439-C7F359931767}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5225E341-EAF1-4BA9-BAB8-89FB7367BA1B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{52378060-1692-441F-9D61-33FCAED8DA0E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5295E40B-0A6F-4C30-A1A3-5D4DE5269AFA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{52B346D5-30B8-484A-BF16-EE9E588C7C91}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{52CCD7A5-1447-4BE1-AAC0-98CA8A265914}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{52DAF031-69A9-4E1F-84E6-9C6ACC0439D1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{52F56373-9903-4B31-9868-6B71603D7083}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{53082615-810A-4CA4-88A8-81DEE7F6AC15}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5327D74D-8AFA-4359-B597-0E624CB136F8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{53D4A97A-064F-41A6-BF87-FE06DB7B6F3C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{53D6F428-B1E4-42EE-82B0-DA0355558B8E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{542EBCE2-35F7-4A0E-AAFC-8F8EE43340A9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{548D3B5E-38FE-4DE7-95FB-FED04CB704B2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5504E3E4-2A7E-4761-81B9-1E56B844B9E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5527CEB2-AB93-43D4-A508-C03E0F6B4FFB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{555ADCCF-7B40-45ED-955A-78A74E8B7FFF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5576C16B-574B-4CAD-8F60-882811E54529}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{559B3C1A-40C6-4D0E-B4CD-4EF315DF7868}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{55A557C0-B41D-4367-A4EB-CA9F7974C9F5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{562F65F9-3661-4644-B8A4-D25F40A99DD1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5666CDFF-EBEB-4E3C-AF02-B602380EE88F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5672C378-37B7-42D5-802C-D70D3F48F3DE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{568A30C6-EF87-4DC1-A04B-E80F4E61F88D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{56A96CC4-6107-4DA2-B952-00708302EF66}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{56C0B93C-D112-454E-BC93-CB46E2225844}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{56D39275-3756-48B9-ACEA-E4789D4C4AD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{56F131FA-37F7-4B9B-8193-42FD6D57CA46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{570B16D7-B4FA-482D-AC87-6B4B71A14E1D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{570B545E-537B-486B-A372-B47B9C5081A3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{570BDD56-FEE7-4FE6-A1C3-5A8C15B7113A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{571F9BCA-D49E-4BF1-A4B0-844885AEBE44}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5741CF7A-3E2E-4638-8D02-BA16B5D93DA9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{574CCB24-5CAD-46DA-AAD3-94C6DA91E74A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{575E93AA-DA62-4F27-9858-F1FD2C4820A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{579D3554-7129-440B-A8A3-8BC0BD0A664D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{57AF4C4D-25DA-4B77-936A-60BA93F1135E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{57C262AF-B0A5-48EB-AFC5-58C0EC2CEED0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{57E14F4C-EAEC-415C-BB95-6A6812546710}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{57FB74DB-2668-460E-8EAB-68072DE094BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5804F849-4AF1-41A3-A73E-EE4FEF57AF0D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{583A2FD6-7A61-4697-AE34-D100F4F5E9E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{583C0C95-A35A-4CF7-8DD3-DE63279C8701}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{58D2349B-D8D8-429F-8F90-3A4B1C06B73C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{59141297-7C82-4ECC-969D-3FBB3E439E10}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{591A3A35-ECED-4ADB-8B1D-431781A4004D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{592A2D80-5724-47E7-92D9-1ECA030DBADF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{59878E2E-FBB0-4BB7-903E-C7E7D38046BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{598E49C9-0591-46A6-ACA8-E35333EE4E30}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5996AA7C-5601-4581-A4CF-D91DBA6F79C4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{59E0F693-D9AC-4574-8912-116697FC52D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{59FA0B3E-60AD-4BA5-A146-CA76F6BC4AC9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5A07EF15-B0F1-49E2-9868-1187666D69A9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5A8E9BC5-3AFB-422D-B04C-3C64B7DDF0F1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5A9E8D40-2169-4E24-9612-2D3B407A3945}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5ABC9C57-0D41-464F-8B1E-B3B84622E262}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5AE0D842-ADF6-4EEE-9DC5-3B7C7B3EB675}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5AE1527C-6CE0-47B9-B11F-C548B482B22D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5AE41DF2-9D52-4512-9CEA-EB7BBFE4D1ED}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5B7F093B-A261-463C-BFC0-F7937868321F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5BF34808-5161-4BC3-B2C6-7833A739325C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5C1051F2-E411-4736-B0B9-D86A7C600476}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5C3C5B0C-1254-43A3-ACBE-CB241CD4F2FA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5C6E1F7F-7594-47E4-86DA-7ED197DDA859}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5CA83162-51A4-48F3-BFAA-2730EBDB6E80}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5CB7CDCA-509F-4F01-A22D-38E50E7BDD86}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5CE4B55B-880D-4E1F-958D-7CFC1DF90F69}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5CFF223F-7913-43A7-8823-854636C091C6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5D5EF140-54C2-4D15-9D6A-CA3271E654EE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5D81484C-85BA-4F58-BBB0-CC60AB483D89}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5DAA107A-7C39-4BF8-BFFA-069C175B7A88}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5DBA774A-F01A-4830-9B9F-BE3B0A8F2144}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5E65B66C-6332-4E24-9043-C044EB618A60}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5E6C540F-67C7-4DFF-8153-1B8148156366}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5E892BDB-B40F-4888-841A-49EF80748EE9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5E8D6DC3-A391-41A9-B125-C79D85E2F22A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5E998D56-784C-4856-97C5-62611C4128A9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5F0A0EB1-3CC5-4AAB-9AA4-0F1E8996F136}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5F2A9D97-B142-4B4C-9C4E-E356C1D10152}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5F6B4795-1332-4128-929D-DEAD25B626FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5F71652B-91AD-4FA5-9989-B2286977BF05}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5F7A5F93-5F10-450C-B6C4-86B6746DD0A2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5FE6A83E-1A91-43F3-9164-085A452B0C66}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{5FEB4345-3569-4663-970D-E37A59CE10EF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{601EB1D2-9EB8-4C45-8019-02DE638571F0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{604E8142-7D6A-4C42-A20E-3FDBF15A2E93}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{609B70C7-85F5-464F-9320-CE7283C8BE36}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{60C22AA5-0FB0-49DA-8B0E-E8026DDC3527}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{60E44843-7AB8-4B4B-9D5F-11307E2909AB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{60F0A823-D55E-4FA0-935E-A58CFCA8A9D4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{60F205C4-EA7E-4DC6-A677-2A2FF09397DC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61490857-3F00-4DA2-B055-D5EF6E109C00}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{616313D6-5A9B-4549-8C3C-5AFACEED1072}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61806DD2-F4AC-4CED-81EE-09506CD3C33E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{619E16AB-3BAE-4A76-BA41-653EF83D97A7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{619F80A5-0A6B-4F7A-9A0E-0CC9188E0EDA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61C66A1A-F94D-4029-803A-053CC1761BEA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61D929D2-55BC-49DC-92A4-0FC220653A0F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61F92A1C-A436-4CEC-9B13-4C4388888C56}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{61FFB035-978A-49F2-8DA4-C1F1D916F2E4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6227DD6D-02A9-4DDB-9D2A-213B07C10E14}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{627C5DF4-0A22-40B4-B3B6-F2943A05B12F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{62B4D70E-7D97-481E-B543-367B72D1DA7B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{62C654B0-93F8-4650-9ADD-0E67AA2D074B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{62CF8760-C671-4A31-A5C6-29BB1273A6A6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{62E7CB32-1E40-4C74-B1D9-B54E4D688487}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6359E9AA-49C9-4D0C-A85A-4A6A38B2EC94}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{63C158DB-A8A8-4090-9061-8E8B2413BBD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{63E28386-96FE-4E03-AA03-F0A55B06ABBE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{64570BB3-906E-4943-907C-55CF06E41DA0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{646E9B4F-0EF2-4B3D-B3EB-37505FF94BB8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6481648B-ABE5-45AB-A205-859BDE398DB1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{649950B5-5176-420A-830F-8A620F5C54A5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{64D87ED3-0202-448C-9383-460DA759E60B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{64DAC437-A862-463A-85F5-5CE5EAE04833}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{64E02DEC-C92C-432E-95A4-915D1A512364}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{64EE36C3-CC70-4648-BCFD-11342DB82226}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6515C96B-C956-492E-8352-AA5012DE21C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{656B82BA-9815-4BC5-82B2-064E699367EE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6577F7B6-19FF-4D85-B0B0-3A2F67CDB14F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{658F796E-8FEF-4024-B64B-181B714D56EA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{659FE29A-15D6-4F74-9D6D-67F9D8ECACC2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{65C30E85-3733-406A-91AA-133AE8C2F9B4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{65CCD5A0-1DA5-4814-A70A-94A41CA1E21A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{65D8963E-1EF7-425F-9C4D-F195DA87EA6C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{65DB1CC8-2DF2-490C-A43B-88B0B4BAB854}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{660A1477-B798-4828-A450-7C1899CD133F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{663D895A-ADE1-427D-A2DF-959C66D8B7E2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{66DF688A-58D4-4117-9DE8-D0EEC36F0841}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{67690DFE-E713-4003-A74D-03A77E029C07}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{67C090C1-C646-4E89-92F6-394832B030A5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{68069A32-5775-4FF2-BE64-CA3B3084F4FB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{68315B12-C6DB-4014-A720-93F4313BD059}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{68F91E0A-E501-4053-A151-5847DA816AE5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69079B21-5BD9-4E08-9A8F-0E13CB56255E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{691F616D-5930-4E8A-89D4-D8EFB7FBAA17}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69568064-DAFE-4F0F-940B-508AF70D93DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69869287-D9D0-4EC2-BB07-0D4118E87563}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69880F02-E154-48CD-AD5F-B349F97E7DC2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69C8CA33-2D74-4B3D-8E7F-B86180A2D69B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69CDAA1A-AF84-4792-9C91-1BC76B72A6E5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{69DA5932-2EA0-4299-BAAB-218F1DD266BC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6A3ECDE8-FCA4-48F0-91A9-E8A4C65011BE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6A5A988F-784B-4C4C-8AC0-19922AC97C1C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6A60D5E6-A191-477A-9FFD-A2C30B80DCDE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6AB87C19-4D05-47E5-88C8-93F09A21E47B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6AC63F60-593E-4A44-BADC-9A8BF1B7B6F5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6AF8D48A-7490-45CF-8F1E-21785A3893A4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B01B58B-51E1-4F17-BE21-28E64C0157AC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B1AC276-C178-4ED1-928F-21736142AB9A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B1B6367-53DA-43A3-B9B9-20266E33590C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B219D95-171B-47A5-9BCE-8457E1114EB0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B2FD63E-1BDF-4DF7-A227-49E9041CFCF0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B344BBB-1D6B-43F8-B550-88966BD63B82}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B368D60-46BB-4AA0-8157-BBBD99557B7C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B620133-F44C-4024-8BCC-FCC47CCB1A82}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B6C11B6-BB1D-45BD-A4AA-91A8D60482B8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B768CE4-F8AC-4A58-B7DD-BC72BF47F302}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6B98458E-43BC-4C92-96E4-FDB6396563B9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6C424E5D-4698-489D-A323-97527257224B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6C556F73-D8C9-4565-BD01-96B571E228F8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6CB36FD7-8F9E-4F33-A6CC-AED7E3A70996}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6D32D3C3-7F04-40A3-B8E9-D6BB38FE1024}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6D90E656-0C4C-4D84-9FF2-DCE713AB6B3F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6D9FE77C-D6C2-43D0-9E41-73C0DE4687EC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6DAE81D2-F1D5-40B3-A1DA-A0F0FF84F112}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6DBD495D-7EA7-4A7D-9BAC-51C1D40D4E61}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6DE6B364-F817-43DB-A996-283D38648ACF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E0A92AA-DFF6-4B31-A509-6D81B7AAAB41}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E0BAF4F-A720-4EA3-B7B9-602BEFBF8DB1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E14F87E-AAC7-45BD-9655-27213765EFAD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E5BB257-DB80-4802-A66E-08A9ACE1DFE7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E98D443-C2E6-403E-BAB3-49028DC523B9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6E9AE2C0-2A21-4936-B930-C8A2FCC1B5F7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6EE57BE5-0BC2-4B4F-AA17-983324B8AA6D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6EF6F937-4E42-4778-9C41-7B92586C7317}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6F912EEC-405A-4173-9BC9-9C8CDD9ED9D3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6FA7A4BE-6536-4480-AB5F-2A721ED0BE85}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6FD0C880-B230-4175-881E-95907BD089E5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6FEBE32B-25E0-437B-AF7E-CFD4C403AA29}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{6FFF8715-C607-4EE0-B9C1-1DBF6AC48166}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{70015F92-B0E0-4619-AD2A-4C242AB989AC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{70286DF9-60CB-41DB-AAE1-718E62213B9B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7039FC06-5785-4293-8855-FFCB51E46607}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{70F0857C-DE05-49D3-B016-1F97058E0C1B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{71302935-F651-4275-BED3-068DEB2B8FFC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{71302B85-51F3-4A5F-B5D1-9ACDF8EF8EF8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7137B686-DE55-44C4-8726-09E51AFD3788}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{716BE6A4-BD3E-4E55-AF2B-2308EAC5D04A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{717E5729-0BC8-475E-9F53-EF773F17748A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{718CC639-5CBB-4B8F-8AD2-47EF060BCD13}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7194DBDD-7923-4AA0-9E94-44F8BC3565B5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{719B99B0-CCEC-4DE4-9D96-98FB56C6B303}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{719E2626-035D-46C9-B23A-0026FA61600B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{71FC0D6F-C3BD-4B95-8F9A-9B97316B7FB7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7215EAE8-09F8-4224-8F51-32FEFCB39637}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{72212627-B438-4796-9006-CD9BE43EA27B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{72250E65-19D8-4FC6-91E4-78E4F27E7427}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{724D45F1-6AEC-43D8-8511-62BBA2B545B8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{724F6D99-CB81-4137-9C06-42E200C6F08B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7269AE37-4B30-4C13-AD23-66F623B28606}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7292359B-0998-4199-AD59-73EF59F58A37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{72AC393B-30C1-4C2C-A2CA-7593E013703A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{72CE0D20-9D5C-4640-9A2F-959E81388E69}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{732BD01E-272C-4827-91C5-91C54E40FBA9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7347850D-EC0B-4B51-B86F-F82F1F5C9A69}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7352C600-468E-4805-BC56-D45155510FAF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{736B9997-4D5C-45AB-8DE2-FE97CDA83929}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{73C8DDC1-22EC-4D7D-B6AE-D5F473402317}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{73CB4CA1-2679-4BC7-AC71-5663801BB4BB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{73CE0ECF-D985-44E7-B778-FD29AA6B2836}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{73E1AF4E-8A65-44C3-B02D-B1BD3E2D49F9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{73EA4CDF-C0C6-446F-AE5A-46D472B27F3E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7420668A-E8DD-4270-A452-99DADFFAC56E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{74456F81-6833-4D31-AA9F-1DF49738D92B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{749DFE73-FDED-48FE-827A-FABA55D3A86A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{74B440D9-A53D-4AF2-A417-753F322EA9A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{74FE5DA5-2019-436C-8031-8BEF3FB08461}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{75027DFA-730F-4AA9-A48C-D6DE1E1D3802}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7519B695-1C3D-420A-A49F-7C9919351AAF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{753E85BF-6A3F-49AD-9A6B-EBE3F016DD78}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{755BDBB0-8B7B-4A16-9F4D-D463FCCADA32}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7566B7EA-EEFA-4D8A-83BE-F37F262642C4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{757A1728-3493-4431-9045-0640EDEE49C6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{75BE13F0-1FDC-4CB5-A00A-948BC1F17A17}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{75C93A5B-DE66-4597-9A24-80ACC037060E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{75EF4D3C-E506-4E93-B40F-0D4A6163F20D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{75FD07CB-50DC-4725-AB92-F04983398D44}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{76374351-D873-443A-953F-28FDAD7457F5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7653633D-FA60-4765-9115-C84C6FE3791F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{76753497-2784-4265-8039-21ED2DA95377}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{768D9413-A62F-4AF4-93E3-9F6E7CA9AB78}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{76B935B4-8BD3-4AD3-A98D-5D6C0D1EA849}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{77512C0D-0560-45FC-8242-FD17977501D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{775FA39B-6C09-4FBD-98ED-1B849CF56B8E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7763ADE9-0B7E-465E-B619-FDF2CAE1031A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{77A22BC2-4A76-4BEA-B1D9-931844B5A657}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{77C3BBA0-FB3C-43CF-A898-618404EF9DFF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{77F1E115-1241-42E0-A71A-85CC3C316895}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{78386FA4-4236-4724-962D-2C6AFA070708}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{786E2CCD-690F-48D9-99AD-1B8008A192F9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{788B708C-5119-4B6F-B5AC-4504761B55FA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{789FE95B-FDB3-4D12-B965-F9EE37E3024F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{78A2C76A-F71F-487E-9C1A-2CDDC64149C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{78C92CEA-CD2C-404A-968E-1F117AFF0DDA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{78CCCF94-393A-4779-BEB5-93F9DF749241}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{78D52EF8-0624-46FC-9828-2650B2594A0A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{79087969-CF76-411E-A3B3-836964A2562E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7929C42D-EB9D-4EFE-A933-09BB8E7410D6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{79F33514-6F1D-4AB1-B35C-BAB23DC9031A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7A5989EB-6FAB-49E7-96EE-F059D315A598}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7AB620E3-64C1-41DC-A094-90A07FFC2F0C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7ABBBF71-1437-4400-B3F2-6516C7D66374}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7AEB1CE5-5377-48FF-B1A3-0FCDE374FFB4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7B17013F-363F-47B0-99B5-7E90BE8A5E9F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7B1EC0B1-CEE7-4504-B3A3-9A112B02EC7C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7B252960-CF57-4E5B-8D02-21B7BAADF7A6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7B2F4EB9-8587-4C06-87A7-213C1C013672}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7B2F71BE-C34D-47CF-8157-27077C70EF17}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7BC9B976-DE7C-4949-A006-32C2F7B6A27E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7BE480C2-DE2B-4A30-9CBA-91A748ECA83F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7C17F839-57C1-45F0-A7F6-BE88DA252554}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7C262C18-946D-4123-8C53-F80FC14CCB3B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7C2874FB-D819-4FB8-A997-8529234CB2E0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7C74DAF4-89A9-4569-B11F-E182B8A85BCC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7CA95573-8462-407E-96D6-E3F4741B31B2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7D05A80A-C88C-4FA2-BA64-0D53FE529C51}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7D07F1D2-11D9-4925-B901-14C394022141}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7D4E7D37-E975-4164-8784-37D199F69338}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7D774783-65A8-45D7-BB9C-503CFF11C933}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7DC678DF-04BB-46F3-8C6D-F1ABDCEAB69E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7E346548-2C41-444B-810A-C4AE53707544}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7E6BA059-9613-4681-AC7D-F8C347FF89DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7ED53E58-2479-498A-99D4-05CC28BCB8E5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7EDEAFEB-874E-466B-B7C7-B795A8714B15}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7EEB970A-4318-423C-8681-4B20C0AB8EA5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7EF69C21-9923-42E0-9937-44C885B1B758}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7F0B9E23-9C39-4EE9-A85D-B948ED71828E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7F2E61BA-F818-47D0-8B84-AB1DA3C58502}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7F8D2FAF-CE76-405C-8AE3-AB572605FD93}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7FAC62F9-D6F3-465B-BD90-AABF42407D36}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7FB0CD57-D6EB-4D0A-AC32-ACA68FCE501E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{7FE57E13-B5E0-4ADE-87ED-F452FC41AD09}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{803F6225-1CBF-4876-925C-0DA4E713D524}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8061A536-8EC0-4372-8EDC-D2C3C8E5D540}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{808F4B3C-F64D-4A9D-87F1-FC40155C772F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{80D86E21-344C-406B-933A-326DE6DF0D43}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{81275193-75DB-4CBA-83E0-01DA50C2FD9C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{815BC163-D2D3-4A46-875E-2C00A60BFEA8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8167DA4A-EAB2-4DA9-98D0-4E495F63AD42}

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

File was too big here is the rest of jrt.txt

 

 

Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8184B098-34C5-4128-A70D-F10DDB5A620D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{81CAC233-8301-4AA2-8032-D0A00328E67F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{82207097-603D-4AEC-84FC-2F19DE6209ED}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{822BC11B-DDA2-4A89-B328-2A75211A3603}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{82388401-65AD-40A4-AF6E-BA32C9B30DA1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{826F924E-70E8-420C-90EF-87E86E113E11}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{829DFF6D-3A6E-4951-9774-45E525F53B95}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{830D4517-FB12-432C-A785-4E57DF75D798}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83212F3B-9034-431E-9A9D-3BC027B7BF59}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83241766-6F8D-4DFB-A1B5-BE278997BFEF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{837E5CDB-57F0-4394-9A6D-1C67A1E1E00C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83821EAF-F10C-4888-BD98-6335C4583FA4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83BBD984-D3EF-4A69-ACDB-C1E5BF37810F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83C14D53-7BAD-4FB3-9551-BDA80FD60099}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{83CF0C44-DA20-495D-A3C8-81D9C332BE6D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{84378F44-28B2-4823-8FCD-BD9EFA1D4EE3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8468D3BF-781C-467F-BC68-8DBD8B97098C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{84B6E5B5-5C8C-4006-994C-C2D0B55799A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8508F20F-268F-43CF-BD22-51EF1577E229}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8568C772-D2B3-4EE3-B491-B9D33FE463A8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8599380D-27A3-4EF7-8D68-1A670C5567FE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{86758861-F238-4945-A7FD-B9B948A6577F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{86814CA4-ACFA-4D17-8452-1C591269C65F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{869F93F0-D3CB-42AE-A2F6-3C86E19196EA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{86A6C7DA-9A94-4887-9704-F07EE7FABDE6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{87458D87-F556-49D8-B4C9-AEDBFBC0E08B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{879CC418-A981-49D9-87A7-947F63CE3CC8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{87D20EAB-1CB4-4F76-AEFE-AB275A7EB9A3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{880D582F-3E6E-4810-B377-5CFBF280BE30}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{88D3E206-F4E6-479E-A358-C2C80474E481}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89022630-00E5-438A-93FC-AB6C47EE16FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8920C83B-918A-4D1E-B41D-58488A3BF494}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{896B5D80-27ED-4008-ADEE-52BAC3F79421}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8977EB6D-C6A6-419D-B790-851AF220240D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{899E6067-2EDD-4F81-8504-ECF5AF04CD65}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89C2C632-0CA3-4550-94D5-602D56BE583B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89C4DE4C-0FCD-4676-8A7F-85AF99108EF1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89D3A18C-1CFE-4C6C-8131-958BE52D5E55}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89DFA3F0-9A80-423A-B4BB-1367434850F0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{89FC9AF5-90D0-420B-B152-1FA2D9268C80}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8A7DDE5A-6CB8-4EC6-8A1F-70E7A3369726}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8A8E48AE-7FB3-4204-9440-ABD2CFD033D3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8AB4761D-8493-45AF-BCCC-749A10C9C036}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8ACC8BC4-F54A-4F23-86D4-F2E0555388A2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8ADBC8A5-4667-4ADA-B925-CA204892F68D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8AF21EEE-1A50-47D9-A3F4-62AAC98C13C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8B60B0FF-9A99-4D7F-976B-A12CFF4E49B9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8B696FA8-7E98-4B95-AFD7-D9E9EFF9C4C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8B6B77DB-AC77-4E8A-A7C5-3665EF796AD9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8BB1DD92-B3F4-467F-B3D8-52EC52C9FBE4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C01036B-123F-45E2-BAFC-4B88B9D94516}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C2439CF-6B08-4B77-BF85-4D63AEBB5504}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C2F6228-0001-47F8-9C34-91CE017AEA0D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C4413A5-3D42-4950-80BE-7BEF11675520}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C57318B-9754-45EB-9CB4-B4FA3B92D626}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C7A894F-C9FF-4269-9C18-889B82C65873}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8C95DD75-6175-413A-8AD2-6BD8AC33424E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8CC7BF42-CA19-4A3A-904C-C0A9F6E21126}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8CD43B27-5D83-4D16-A702-51D6B1A1A79E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8D0EAB8A-F46D-42D9-9500-A28B195C47C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8D510803-5A86-44DD-A91F-4D81EBFC61E2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8DA7E6A6-B5AD-48D6-BB7A-53A7119A8723}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8DF7158A-FBE5-47F2-A75F-8492B1CEE291}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8E546EE6-C2C9-416D-9564-DA691B0F498D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8E6EE56F-2346-475F-9417-C1E1742C4249}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8E7BC07B-AF50-4A7E-ADA5-5E9C06003726}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8E8B8599-753E-4D6E-B952-B706437733D1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8E9F05F0-0C44-4CB2-9AA0-3E29C6271B36}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8EC53B4E-1219-4B09-8D46-E8617381CE38}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8ED8FF8A-43AB-43C2-AA29-36D29BA04BC3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8EF6DEB6-23E2-4E6C-9A3A-29538C4A45F4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8FC2EE82-88F3-40A1-8D5F-3EA9C4345DE4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8FC340E5-FBB7-4432-88B8-609C8B5C1359}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{8FE43A57-3827-4FF0-904D-5F361CD04862}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{900665EA-F2DA-4AF4-ADD3-F17D667B3481}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{903AEFD7-DB0C-4C10-8D41-7B99954CC4D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{904D6B1C-B25F-495C-8E1B-D9F60F5EF122}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9054DB49-9005-40BC-9B16-67B083613D58}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{910ECC87-75FE-409A-ABDB-8FA29E58EF9E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{912A220E-60B3-44B4-81D8-2D2563604CE0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{91745838-282E-445B-B15D-557FC02EB59A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{91BFEC11-6F1E-4E4E-A3F1-67ADAC0918A8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9204442E-7F73-418C-BD1C-05BFC8DC5107}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{921F3641-3F97-4716-B641-4875F0468678}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92412474-33DE-4126-9285-BB62964DB039}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92A1B579-B936-4FE1-991E-636E46D233D5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92B8DA99-4B4A-4AF2-89D9-3C4AFB1A275E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92D15E2C-ECFF-4B24-BCFE-3F7C121DEAD8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92E7DA18-FC07-4963-995F-41305613D69E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{92F81344-606A-4B78-9D11-FA6E5BD7037D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9301C6DE-43A8-49BC-8DC9-F3B25E9A3908}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9320BAD2-A916-4B13-A09F-67C794313090}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{93559095-FB79-4D56-B9EC-E363AFE28573}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{936DA0D5-3224-49F3-9DC4-1E6D74735E47}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{936DEA52-762E-4033-8738-180C660F0A8A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{93786048-B7CC-4E8B-9ACB-6898B17B059C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{93898906-40C0-45AC-AF7B-CD075ED60148}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9389A188-7A14-401E-90B3-49A7DECA9911}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{93F22D7A-76E5-436D-B71E-33F2500EC1EC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{940CD756-68E0-43E2-9165-BC36BF1F106C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9415CF40-E5BB-4664-A4BB-83BCD5E5A924}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{94547183-1F65-4B5B-877B-D44593FADCBE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{946C6313-185A-46BE-8223-75CBB7FE99BC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{947AD7BA-FF08-48DC-98E9-4A7E6D104E61}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9486D78D-416F-425B-AC0A-B09AEC5189CE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{94A98332-617D-478B-AE19-F98FFE0F9125}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{94D953B6-3E09-42DE-B006-35DBD7771D9D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{94DCADBB-0F9D-4E16-91E6-9D538383D8F2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{951BE171-024D-4A36-97E0-77D887628ABD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9585D39C-DEAF-4D72-B19B-67EB8CAE2F46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{959D0584-E9BF-4321-B0E2-E8461F92F204}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{95CC6FDC-A6F7-43F6-9920-7BE942EEB349}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{95F1459E-42A5-458C-9165-2C4F1F56EDB2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{961B81B8-3C3B-47D9-983B-F9F60E4C32BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9623897D-E424-47A4-915E-9EACE7911F42}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{96FE3971-279F-4F16-83A8-E0989B439FC1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9724D0B6-C12A-4F72-BF35-0A9329BE2A65}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{972A5E09-75B5-4343-A220-DAA47491DC16}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{97566626-5718-428E-826E-69F522009DCA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{979E96DC-25DA-413F-B769-A643AC791FD8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{97D04694-746E-4A5D-B9BE-58935F045D1A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{97E193F7-52BA-4DE0-ACCC-D05FDFCF22A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{98305A9F-900E-45FF-84F8-BFA4BB97ED37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{983CC664-A9D8-44F1-AA53-7F345EF5820A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9872D779-49A3-483A-B03E-2CE4C202F5D8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{987844A7-E1FB-410D-861E-CF1C7A6779B2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{98825F2D-DAEA-4139-BF7D-DCBD65A7FDE0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{98C9B711-2A1D-4AA7-8804-2CD87070936D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{993A9D67-8ED4-41E4-84B0-6B1576769A98}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9971F94D-494E-4D52-9DC2-0DD8D0B2660F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9985A936-52F0-4F3D-A215-AF28FC39BF34}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{99BEC9D2-467C-4A89-B129-ECD9D6B8A678}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{99CDA209-7425-44AA-84BE-2DE9A58EEC97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{99FC6ACC-5701-4656-8306-DA50796CF3FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9A45119C-8473-4CC4-B3F0-E4DCE28DD3D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9A9FC1F5-E633-4D49-B1ED-7EFF67B6E0FB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9AE02A00-7826-401A-92DB-7986C29AE029}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9AF7BA23-B055-4251-ABEE-56B3449C2A6C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9BB9D868-A586-4F45-A504-DEB4AC55D7FC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9BDB1544-164D-4503-A9A2-7458BA3C7217}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9BF508B5-3344-4406-9735-9450EFAD5E3E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9C2031D3-9097-4311-8150-BE34450A3D4D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9C56310C-0AB6-4E23-93DA-2C85FC0B4DFD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9C80C3B3-AF34-4A42-9B76-7069F269AD96}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9C92A4ED-5B14-40BB-8482-1D58C3C8E05E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9CED030E-573D-4002-8C5B-2D8C1E3A2916}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9D16E9C6-7B79-4DC8-9133-8926CF92D41A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9D222067-2F07-471A-9859-A1D1B9B5CAD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9D603D0A-C609-4F59-A631-5B9DDAC6782D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9DA220C0-427B-48B2-93B5-F7787CBDCFF4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9DBE3A15-7E53-4F1C-8DFE-2C34DE12A907}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9DEFC90F-D0C0-4D45-87F0-B558C1F7004D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9E7E3594-DD6E-409C-A45A-70BE4F9F88DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9E8F1616-2AF6-4DDE-8C62-139FC072A17A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9E93A027-2824-4F1D-A3C6-7F8D23313F3B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9EBBC92F-0085-4B5B-B8C9-705F8BCDC75A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9ED78543-C9D1-4334-8DB7-78DEFA77DCD5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9EFD4125-0D7F-4323-B1A6-52A7E46FEAA0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9F182EE1-1694-4CE6-B314-981AEE59E264}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9F71DD9B-4424-47C1-A611-25F69D37B073}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9FBD1BF2-C4B6-4FBF-AFD7-7E6AB5849BBB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{9FC56DC9-3D99-45A2-AEFA-A191AD888E67}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A01F0B7A-DAFD-4800-8CD7-EE21A689BA37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A03EDC11-BE7F-4577-8AE7-161C0E78BF76}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A0405738-6D8B-4FC1-8AFB-EC31F4E2E634}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A0AB3A3B-0D1C-4CE9-AFE4-F99E8F45D048}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A0E87D77-2280-4130-9BBA-4BAB9435EC76}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A18C5702-CD77-4046-8CD6-DF2959C19298}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A1C06AE5-44D9-4CAD-B815-391BAF4344F3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A1C09B05-0685-44FE-92E9-7E774080879C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A1CB9C50-6FC8-49F9-BC3A-82C588C3429F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A1FD3AA0-F1F8-4036-A741-7E2787AD4EB6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A210565E-8A64-428E-95FB-4786BB707871}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A2128CFF-0545-4281-8F10-E53D75DCAD92}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A2285EED-5CAA-46C5-B353-6C423104BEEF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A25F6009-4915-42EA-B64B-E3C9B6BE2423}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A282A1CC-BFA8-4397-A37F-D40DFA2D91C6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A2A18152-A626-4CE6-BF2A-6D4DAB1B6CAB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A2B40758-2C71-4B78-B8EB-12A526CF4B21}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A2C154F8-1A5D-49FB-BCB7-2E815A02E74A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A307296F-F88A-4E3A-B0D5-611EFCF3D53B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A31043FB-930C-417E-8252-8B1580B94083}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A34BA559-A99C-4DD6-B2DB-1BEC139F9079}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A4507A47-1C34-41F4-98DB-C4F09394CEDB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A493103D-E873-47AC-9E0B-FE9364A8273D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A49D711B-7ACC-4FC9-82A3-30724338B117}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A4E31995-5B30-4137-A740-C9C525971B10}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A512CAA1-BC73-4B82-90B1-D5D6162F42BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A51DF7EA-9382-4091-A797-CF351CD1481B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A52B666B-941B-4CD1-9639-5817CA7EC334}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A562D8A7-0B98-4BF2-B8DD-7D9D9D39CCEA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A58F91F8-E758-4D8F-9329-62B843A951F6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A5D8DE24-DCBD-4520-947C-94A5EA5D7A11}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A5D9C3DF-CC88-42E6-A806-D59D73399705}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A5FF94FD-FA28-4809-A440-98819D6AE7B7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A634A9B2-5FC7-491F-8117-9241F1FE52A9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A644D4C6-9983-4C6C-A4D5-7BE5720403B9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A65B7D54-3012-4205-8C63-C73209490976}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A68D07BB-B601-425C-987A-FE9B862B79E1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A6A23E3D-5A72-459A-A168-44BC83E1FBDE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A6C9497E-9970-4EB2-973A-9768A175EDD1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A6FF8DFC-DAC4-4573-BA01-E66757453C12}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A702F1D6-0865-45B4-A838-0876488F9E16}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A732D93D-500C-4E61-B519-E10206D5EF63}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A7379DB2-5C39-4A3B-834A-21675A898474}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A7B48787-BC2B-4C70-ADD0-FB08360D27B6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A7D6EE08-18DD-458E-AD5A-42F9728367FE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8275731-CC3E-4C0B-B7E0-7E8E32FC506D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A82EAA2C-EB33-40F0-BCCE-D5325510D149}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A87B1735-BC30-4BC2-BFAF-8B4CD6F042A0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A88998EF-B511-42CB-BDDA-27E7CA523FE6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8B8892C-7B94-4865-BD6E-30D113DB5B31}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8B892FD-B1C3-43C9-B415-3DEC9275B373}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8C4EEC6-36EF-46DB-9A95-30DAD5CDFF16}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8C63459-F735-4540-97CD-45776E238A9F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8F24A27-19F6-4486-A5EB-8FDDC9A03145}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A8F266D1-C831-44EF-AA3C-EE78107D3CA7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9191C62-F791-4712-B7FC-688818BA448F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A92ADD59-2B5D-4C3D-BA82-C69DE7B03215}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A948FB3C-AE35-4021-BF4A-BC0C6D64E150}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A94B72F7-BE2E-4BCA-857B-0CC718B9B870}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A970AD66-A50C-40DD-8AC6-B89AAA157887}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9979D43-17C3-4E2C-B308-6825A9362609}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9A140A4-F7D7-49C8-ABD7-92351C625486}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9AFED9C-0E2F-4CF3-BCD0-586DF0AF039C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9C7D501-D0DF-4F0B-A22F-53500BC55E97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{A9D0F95F-2595-42B9-8656-59C674FDE9D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AA1BD8BD-9385-42A4-BA6B-E8F7414F1F37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AAE7A6C5-C022-4BB6-BA85-497191E2735F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AB5EF7D2-6D2D-4FDD-8686-11BE5238D9FC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AB641B9B-36D8-42CA-B27A-839FB72CC607}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AB65AE4E-D650-4D81-8B86-8A6D4C311FCA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ABBE8792-5552-4C9F-8F52-EB42F5151D22}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ABF0F325-389C-4D0D-986C-88C898113E07}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AC480748-C2EE-4C70-BCCD-5C4034F936C5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AD02EC9F-B3F7-419B-92D3-26675851C802}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AD2F91E8-F8AA-4DBF-9D41-F12708B5D040}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AD8F1040-406B-47E6-9F50-84CE184AAA67}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ADF4CF09-80B8-4016-BD1B-4E2335546A43}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AE6186EF-E3EE-4847-A286-0F127ADEE114}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AEA25069-078A-4CF8-B205-F663A7E7FF6C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AEA6B2E2-1B65-464F-AE41-4DE1B6BD1346}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AF56B4B6-AF88-4EF9-B61B-6ABC30FE09F8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AF7AAB62-6B56-41AA-BF8E-7514A3618568}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AF7B2584-F630-45A2-B55D-9829C9B00E37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{AFF39A24-31FC-4B1A-94B4-F29EBE04F410}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B01F66FD-AE65-44F5-904E-DF58AD17759C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B0228A61-F456-4B5C-B22E-13D68A711E62}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B03B87D9-C016-469E-A2F9-12DE941DE399}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B08A67C2-90F2-4F35-916C-78D2D3762613}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B0903C0D-188B-43DB-90A9-8C25E633F87A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B0BB57A2-5935-4150-B0D9-68EFEF3EB648}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B0C45814-0FFD-495E-BD69-B5A44396C6F2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B0C9EDEB-DD0C-4609-939E-42CFA88BAF00}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B125ED49-6083-4416-AF83-7ADB80AD4D2B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B183691F-5544-46AE-9021-BAF29674B591}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B18A4FB8-80C1-47E4-B122-2CC29F96BA75}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B1BFF025-5172-4E0B-84F1-E6D507AEB8E3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B1DBDD9B-CD6E-46C7-BC02-CAC616A5AFE1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B219F539-A853-4E2B-A90E-C6120932DF89}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B24C0EB2-0698-4EFB-A8A6-61FBB4092319}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B253E494-74B9-482A-B995-C0661CD5EB57}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B278A980-B371-431E-8E9E-730B14C565AB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B280FDB6-4225-480B-AE08-86D81A85D5D2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B289C5DB-3ADF-46A5-B369-62B3CB33706B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B2A106D1-B378-473E-BEFF-550AA6BBA6A4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B2BA5A7E-0B09-4A96-B6C6-0821C012103E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B2BE140B-1FE4-41A7-9C4D-DFA809CEF12E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B2D3D2A5-8F7A-4152-BE1A-AB4BBB2D0AFF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B30F0D16-9B55-4040-961D-83E8BA6480EB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B31A4560-AF3F-44FE-8A38-A3ACBFFD8EFD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B36C6945-0114-4BF4-8D2D-65544C8DAEF9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B3789A39-1F9D-4C79-AC66-B853C7058F2E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B38CA2BE-4684-4416-B67A-1D74AC678BF4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B3DC1511-37BC-4A48-A702-2D030FA8BC9D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B3E1E8FB-E517-49BB-87CB-AD864F80B4EC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B487395E-574B-402B-9173-9B0E135E927A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B4AC9D7B-96A1-4A4C-A909-52400E2B18A8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B4CCAA4B-8F91-4E33-8647-654B3FE0E53C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B4DC6752-32E5-4D73-A96C-952AB2F9C11D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B4E4E8B8-C920-424B-9EE7-28F813925BBA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B50C0860-3B3C-4920-9F02-7C1110607A87}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B51821D1-96ED-4331-82A6-8BE2AAEDBFA9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B58DD774-7DEC-4FD6-9EF0-69C2F231AA2E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B61331D9-5484-4253-95EB-86E62C9C131A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B67A5ABD-C11B-45DF-A8E4-B7954529A151}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B69125A9-5128-4D93-A01B-FFA90F10712D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B6FCD514-2498-48F0-9CBD-35A149B1E87F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B72A7783-A3D4-43F3-8CFF-50A3CFADB280}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B75DC1C7-1F54-4EE5-9F54-937859141239}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B7745708-6478-4512-A8B7-EBDDDDFF683C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B81A6653-D1B7-4C5F-B8D8-495B394B441D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B8807AA3-30B0-4E38-8692-A29F7241FE5E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B8BD11A4-1442-4093-B2DE-EDE2F43D6A0D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B8C5B1B0-08A5-45B6-9AB2-F1751E138ABE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B947F1A3-A7F6-4427-B964-335743D9DFEA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B954F983-8215-4CF1-9CB2-12F635442253}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9810456-6DAA-4D9D-815D-425B2198B044}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9C31603-7794-4C17-9B51-1DADC53ED9ED}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9CD595E-CDAB-40D2-96ED-9532607C0E59}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9F6E088-0172-41E0-A099-F7169CE680BE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9F96825-89A2-41C9-A7D6-E13BC0686DD4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{B9F9A10E-54EB-4930-9213-FA0115DCF57A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BA1CD974-20DF-4F07-A12F-B4A1A7DCACB6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BA394D44-011A-42C2-8FCA-E13F03F37CBD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BA84A802-AFBF-4A13-BD46-91438A6F7F75}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BAAADD4B-CD84-41E1-8FDD-50D5375DB85D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BAC3FB42-F5C3-4AF5-9FE8-3360BC020B57}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BAC642CB-DFE2-4E55-B158-9A0974C76EB9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BAD5A545-F305-4B0F-9B82-A9E70EB1BD4F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BAFCD329-1AEE-4F7A-BB6D-1CE53EC5F65D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BB25D0BD-9A56-484A-B69A-CF7EF22BA148}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BB8975F8-DB3B-4A3B-9ABB-9FD1DBB7686E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BB8D6AA0-B1D1-43BF-91E6-16F21D0FF277}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BC0BD080-DA14-4FBD-AECF-255AF1E52746}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BC2FD7BB-ECB3-4396-BF52-4EE61790CDE7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BC833C26-5614-4627-B1E9-3E764D53DA97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BCA40923-6354-42D9-ACB3-52D7C6D42F32}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD108CA6-2CD1-4C04-8262-90BC22228F0C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD4B7606-DE13-4E6D-B412-45115320E9AE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD5C9BD5-3426-4095-9B9B-71CBD815324B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD684236-948D-473F-A52E-E1BE62E8BD5D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD91F2EC-B188-4114-8F28-4D7047CEB7C2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BD95085B-0200-45E5-A4EE-F2AE28548CF1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BDD68344-C45A-4ABD-A21C-641F8C431EAF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BDE39E0D-8D14-4D58-A0BA-EBDD01802444}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BDFC61F1-046F-4BB0-96D4-2AF2082D8363}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BE54D144-1991-4BEF-A39B-318C023F3CFA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BEA16577-DA8F-4859-B127-FF59AD7942DD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BEE566A4-123A-420E-AB34-69CFBF49E281}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BEEDF064-1008-4971-B490-71F6FFD85230}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BF0BCE83-9563-43D8-99F2-44518580A1C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BFCDBFD0-ED3A-4C2A-83E5-169F9CBB5B97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BFCDFF6A-E059-4474-843F-6D9A75D29D07}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BFDCDCA5-5BE0-467E-B3FB-C209D0A59E14}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{BFF95324-9416-48FF-8DC3-EF5215B3ABD1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C08B2CB8-1B21-4E34-8FDB-5A9156B24F58}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C0ED13B2-8251-478A-AE73-9149DF074934}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C1A24957-C4C5-4EC4-916A-1E5AFDBCF131}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C1EF04F0-790E-4131-B825-744ABDC2FD8B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C1F6BF8D-D0FF-4D4D-9044-8C13A49F53C9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C244DB81-3E87-4F16-BE5C-6CC2D2C9BB8D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C24875BD-CEC0-4292-A174-B8BA64A41194}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C2776632-E255-48AC-8E06-6D0F5B438109}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C28B5616-C12D-4B4D-AF75-C09DC6C6E6F3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C2F8B828-2215-41F2-9801-BC87716FCEA1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C3A657EF-8CF2-4F0D-B4F1-C1CDF4DCE5CE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C3B24057-6C2C-4884-A570-93519E91D284}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C3F3D142-8E8F-43EC-B4DA-07F08D7C2786}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C43A8064-D210-4802-AF4A-1ED2A85035E8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C46416C1-B0CC-4A9F-A36C-A9F3B2A1F1FF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C48AE650-43C6-4CF0-B1F8-2B95A4B4C666}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C4EFE721-F9DE-4FA3-9944-76151A70F272}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C50951CB-45F5-4AA2-8FB5-56206B723902}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C52D203D-7F04-45B4-8EED-F71A34B9A4D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C53E9A56-8F2B-4CC7-82AD-184EC285E025}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C58738BD-7208-460B-9442-E2E2BBD88BF0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C58FEDEF-548D-42C8-90E1-DF0A4363692F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C5B46013-16EE-4B11-B1DB-2CE728FC6494}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C5D1B0E5-1194-435E-A681-0129E58A5DCE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C5E07FB6-4D45-4605-8798-C4F1F3B94C0A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C600F475-D346-46CC-9E75-7F43D58E9838}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C615CBF0-3D47-4F13-8336-6622CEE66132}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C65269E2-A668-4000-83A8-973F73301456}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C6684019-0D85-4C25-AC5D-788E041249FE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C68E4603-9E48-4A89-8E92-14A17B467CAD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C699C795-9AE2-4F7D-9214-EEFEF48B1FB0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C6CA5263-F961-4D75-812F-7FA534A58394}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C6DD72EE-39F9-43A3-8791-DF0A480EC806}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C6F9F1D8-0316-4A05-9D0D-B3A0D119D329}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7493561-741B-4A39-9E11-81F94832BDFA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7549E0D-328E-4EF2-917E-1551E9592A88}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7B3E1B4-120A-46E0-8039-6BBAE0A8B185}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7B6AC8E-7792-44D6-9A61-A995AE94703D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7B6EA08-D281-4F42-A136-E1CD29A97D0B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7BA2C4D-E2FB-42DF-8E69-23D4CEA4EC3C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C7EBDA72-A4D2-4A7C-ACF3-DDB0361F73D7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C80D9609-30F0-4858-AF16-F4B832EA23E1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C8224E5F-956C-4F14-980C-A1691A6C2DDD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C828D763-F527-44D2-A2C6-31F92464FF2A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C83892AD-12FD-422F-B606-9D96207F01A6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C863D26A-1DFE-4B7D-9D74-B50E7B620897}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C93D468A-2439-4CDE-A5CA-BCC747C190D3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C9823FA7-D8AD-4562-8A1E-163CA1E9DD7F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{C9EED703-E8B7-45F2-8F30-96CD59A094DA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CA68DF0E-9B55-4246-94DC-F860AB08EDF6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CA758269-03E2-46AB-8904-0428DC6FC442}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CA8858FA-3DB0-4CE5-AF7C-50910F52A27A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CAA3AB85-B838-40AF-A94C-6E370EBCF633}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CAAF6FD4-65E6-4978-A080-B54BB2F90C6A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CAF107BB-7E9D-4236-AACA-1F93BEBF5308}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CB6C8CBE-9184-48C3-A82A-4B408B3A5AAD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CB71BEE2-043D-4676-9CCF-E1E8D4FD5413}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CBE14286-E386-4136-AC57-2672E5189015}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CC0CA8AC-07A4-4392-8252-F361E9C839B0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CC137F4D-1251-4050-A7A4-354005FFC2E2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CCD6FBAC-EC28-4B2E-8D08-57DE976B0AF0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CCE35BA3-50DB-43CE-86A9-6BE506A2DC4E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CCE36D4A-DD58-4004-8028-254A0EB03B91}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CD27704C-58E8-4E34-B2E6-0EC80AC1F7F5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CD8C4F2B-5D40-45ED-AB86-D06F67C26A3B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CD8F454D-5783-4C0E-97C8-4E1DD56183B7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CDB4902B-3EB8-435B-AFE8-B79D61392DC0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CDEFA34B-DFF1-4436-8786-78DFCEF4D8A8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CE0052C4-C4AB-4519-A383-728EBFD9A75D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CE096ECF-7A81-440B-948F-7CC6230B1465}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CE18DDEE-2D91-41AC-81F5-C6216C27C77C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CE56B3FA-6500-4E74-A3AF-98A87585DFD5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CE5CC2A6-69C7-4405-8BF7-CDC5364BD51A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CEC0546F-0344-4D75-A156-700BEABB0ACE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CECA4583-357E-44B8-B768-AC0DA17542DA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CED888AD-992C-40CC-831D-A873B98F05D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF04D3A6-FB7E-4CE0-AAA1-DFEFABBBA68A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF1D2829-69DC-4B6A-94F7-1D74AE4D14FC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF1D39AC-DA60-41A0-ACFF-71FA82863964}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF50B42F-75ED-4DE6-B293-0F5467DA55FD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF5249D4-7A5F-4509-9F29-0DBF66EFC640}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF610552-BBF5-43EB-8CDE-AC3622D6BB69}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CF80FC44-BA70-46DE-ADCF-700C0CCB6AC1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{CFA08B89-841C-4677-AE6A-CC07AF4D5987}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D0540FD7-847A-4AF2-8561-27DDF2688A1A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D0731911-F68F-470B-8336-462FD4ED8B6D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D083610B-5757-4784-B49E-A449C0210229}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D083E140-9A38-44D6-A603-DCFB9495B55B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D09413E3-5C25-4CD8-9B78-7918F3533DB5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D0AF2469-F398-4BB4-BA62-36972EBCB8D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D11E15F4-A1E0-439B-BD2D-F22903A0173E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D137A62F-DD9A-4D68-AC88-61C0531D5B46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D1420A1D-C0CB-4174-98AE-DCCD8B8029F9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D19DF4D9-4EC3-4593-8710-592180D722A7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D1D79493-3B86-40E8-BC8A-72991D345201}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D241A916-7BCE-462B-9521-B4C877C5CBC9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D25B3BEA-AF6A-410D-A588-093F1B67F98A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D29C24CD-EFB9-470B-8EB7-6C57D5AB1BAD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D29E0B7A-F9DC-4020-BC8F-8699AFF6200C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D2E85464-90E4-4E06-8903-9F0E15E29FF7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D3458271-46CF-4405-B74F-41E0D51EB9D8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D3557F8D-21B9-4C79-A11C-36CA0BD9D104}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D3822109-10C0-4D40-ABB2-E15AA37A6786}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D38A7914-728F-4E5E-A15B-F7AFF865E2B1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D3F1A612-0C50-4862-95A7-CC89258E2039}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D47F4DAA-5D0A-4284-A07C-555F2F579897}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D486B1FD-3E46-4D77-A19E-367F3982909E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D4AC7D31-E982-4CE9-8231-CD21E4A8C915}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D51DD96D-0697-47F9-8330-647681F24780}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D559D659-3CF6-4BB0-AACA-23D50A78EA4D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D6251C83-297E-4544-A0F3-4ABA91CFCF9A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D637EC0F-070C-4414-B1E4-6E346A23D36E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D68283CB-35C5-40C4-8B48-4F0141305EDE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D68946A6-45D6-46BF-9575-42D4E58CC0EA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D6A203C8-4B7A-49A1-96DE-4696ABFD7160}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D6BFF08B-081C-4102-810E-21A965778820}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D6FCCA20-808A-478E-BFBE-0CBE6443DA4C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D7041A25-0C24-4A49-8DBA-6F0B04D9A74F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D733E59F-A561-4D0C-8401-BC0E04CF244A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D742AFC0-A0E1-4FEC-A95F-1B5A592D721E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D7536A98-CB4C-4684-8B40-B91C92F7E421}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D7D60AC5-9701-4F15-80A2-54E5D3D8C258}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D7E1913C-69FE-4EAC-8AB5-09386FB54801}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D7FB55D8-1CDE-4C83-BAB3-EAA1D64AD743}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D81372F4-73D8-47E8-959C-FA156A84656D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D841E5C9-9C9D-429C-B413-0E41EFF9CBAE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D857EBEF-BDB9-4A60-AB15-699730846087}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D897AC3F-AF8F-42BE-98F0-36B0A19DD3B4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D8B7B26D-9F3D-49B0-BE55-C7B7AC17609E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D8B8B44F-523F-4F8A-BA60-AF84377C50BE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D8FE8BFE-634F-4DB1-83F4-FC9C0B8326DA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D91B017C-E224-416C-A715-9E1215989802}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{D9221F11-EE28-43CD-975C-FFCA0233A7F7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA1371E7-700B-4A16-90FB-48308E1C111A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA152013-3604-4C10-9B06-D0540F9421CA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA2D7171-3B39-4885-9906-F262F06E8878}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA983BCE-BB0E-4AA4-B24F-B9EC7271C0F6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA9B850C-212E-425C-9277-F10817794260}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DA9D3074-4C42-4F74-B96F-86D092A78670}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DB32E74E-F594-4C47-856D-F7DA1CEEE139}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DB563760-26FC-4E59-AA52-61404E4104FC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DB68A745-7977-410B-BF1D-612510F65060}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DB71EAF5-B5EA-4256-A3AF-2AB806AF822A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC0D3292-E646-47FD-AF68-E3A173A2A354}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC103D2E-524F-47F1-BF71-E103DB0CB2BC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC13DECE-85F4-42E1-8A03-AB902C6425E7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC2EB281-92DA-4B75-B31B-5FA1C7BAF71F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC4CC294-C1A5-4E1E-B77C-C728965959B7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DC993F5E-2472-467B-A48B-924D992ACC69}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DCAF9969-9991-4766-B753-D29CF9619791}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DCC3FD11-F150-4634-AB06-0E2A9729F1F7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DD2C1DA1-680B-407E-B771-4C7F02DE9714}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DD31C072-0A65-43FB-A2BA-D657F1DF12C1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DD9F07AF-92BD-405F-9D3C-57CB8B0571BA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DD9F1D45-7F2E-4680-AD99-5AD4CDCCB5AC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DDBF90E2-1AD0-49C0-86F7-89F4E90E86BA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DDCCCA3B-FDDA-4AEC-B467-9DF38BB899ED}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DE05BA19-1DEC-43AA-9254-005968485F79}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DE07C480-8D78-443E-8681-325FD5C50843}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DE2659B1-09F0-451B-BF55-D9F82D614A6B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DE42A227-B816-461D-9D73-8EB9BDC109AE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DE6643E5-3CDB-4F03-B0CF-45D2C8158E2C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DEEB3CB0-3805-466C-9BDB-B8FEAAA23C59}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DF576E87-30E8-454D-ACA6-8A59AD1617C6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DF9B8C46-99C9-4786-AB41-BAE92C24A7F6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DFC75735-E093-4BB5-9499-E9EC039E61D9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DFD04261-FB6D-492C-9E4E-DA492962EB3C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{DFFEDC5E-72E4-4B84-87D9-D9DC26BE3B7F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E054DF3F-AF98-44B7-AA5A-035B9687CB9A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E12A1CA5-2301-4A01-9FF6-7EAA437CB79E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E1487D7A-528D-4140-9BC4-91CAB4EEBE97}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E1866AB3-F891-4C61-B495-B8C4B0550852}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E1B7DBC4-6E97-40DD-8A6E-25DF7AB26274}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E2303EB0-085C-4AD7-9F34-3D5054A6A387}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E2526136-4DE5-4974-A602-B78A49393478}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E28565AA-75B7-475C-B54A-EF25C0ADF14C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E2CE4E0B-E362-4BF1-B538-2F4C7C41E4EB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E30E31DA-89CA-4778-8003-91DE109BE3C7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E32255E8-5E3D-49A8-814F-590BF474DC90}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E336C946-FA4E-421D-A313-49870AE15DB2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E36D96AC-8952-4CAB-A32D-29145D4449EE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3727092-0324-4634-8729-E827479BA418}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E38028AD-1769-48B1-B82D-866B9989C475}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3A4C3E5-14DF-4AA3-8FC0-96A4EA217EDA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3AC9AE5-CCDF-470B-8811-4888F0295CEA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3CE5295-2CAB-42DA-B433-B137A143FBC9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3D15BBF-C395-4C25-BB8C-710FC8170A4B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E3FE4643-739D-4CA4-B50D-B87A8F057E28}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E4046536-B86A-47F2-9A24-B91F879BD0FA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E41E1EA8-2B5E-4A27-9D15-212F6CF9D2BC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E44668E7-B20E-41A0-B6EB-DD862A1A3904}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E48B463D-47DB-420D-B257-8A8DC3D4F99A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E49CC2F7-4092-4E0C-B2F5-A496818AED46}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E50ADB30-5A36-4489-A69F-6474714A3F5F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E539DACE-F2AF-4A75-900D-5E9F4C0AC8E6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E53E3A25-09AC-4B5A-97CF-82B319E68B00}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E54D0DEC-11D2-4C93-80B6-0C1A91FAD03F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E554ACAC-D088-4B27-956E-AA3AE624CF5A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E56274C3-4D9B-4721-BBC9-605DC88F9C18}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E563E566-0E3B-4BDB-B5F5-955D335537AD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E5D90D2D-E926-4FFE-8A93-E9DA31903FF6}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E5E37551-E43E-43F1-8153-48B38923F266}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E60381B5-CF98-423D-9736-AF6F8DDEF813}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E66D7448-D8DE-4EB7-9A44-ACDB58CD882F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E67B5F3A-CB1F-4E10-818A-343B8F28D69B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E682A68A-BBF8-4C8B-84E8-064FC6D89C90}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E6AC8A24-B763-4D57-B968-960E33D8E777}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E702F9CA-E566-4B26-B5C8-2A61687BA265}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E719446B-0B40-4118-B3CF-3F80A241E0BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E7676BCD-E49F-4CEB-86BE-3052297A2D05}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E82430B5-A031-4526-8131-854605E1ADCA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E845D923-BF2A-4D43-A6FF-B214A7ACA898}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E8482165-0061-44E7-AFC8-CD76AB649A23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E85B0D30-DBC9-4972-B0C5-54CD7755F703}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E883B015-F4F8-43C9-B730-CA9DCB2E9CEC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E92E79DA-DBBA-4F82-AE72-C06ED6089604}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E941E92E-C8C5-486B-833D-55C3DED28F00}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E9685837-DC2B-4891-A401-67A92D38C8D5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E9B6BE15-6E36-43E4-A32D-38BDF390780A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E9B978C2-8333-4D26-A54A-03BEF360EEDB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E9D79B3A-24E7-45E5-9C1A-813F092414BF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{E9E7E85E-300D-4434-96DB-F124605FE5D0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EA09FC8A-050C-47D7-8563-1B793D948B5D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EA2A7C92-DE81-416E-9F2F-C824587C45D2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EA663EB7-BBBE-4999-A3E2-4A8ADEBAC745}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EA86FF71-3B08-4546-AF9B-BF21C7F382BD}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EA979213-877A-4078-9D25-5280F2B33A24}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EAB73EBD-EDCB-4FC8-854E-C4008A88A024}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EADADDCC-D1DD-46DC-AF56-66244FDA53C0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EAE43466-1081-4038-993E-F0025F265CFF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EB076B23-82E3-442B-8E92-08B10AB1379B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EB2CBA9D-EE23-4558-AE44-84A246E1D0F3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EB3DBE2F-127B-492A-AE40-038C7BFA8EDA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EB5F1C7E-6A42-42D8-B893-1C50E0A4963D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EB924290-7429-4216-A0B9-77782BA2B976}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EBC80B30-ECA9-439C-A59E-CE1C9432214B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EC4DA965-0814-4DE0-9EF8-D7DEE99E6725}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ECB0D5AA-C555-404E-8381-D7BBAF062E21}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ECC138DF-CD4D-4095-9E32-6E8F4DED8F80}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ECD0DB7A-BF90-427B-9E84-7DFDBE80F869}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{ED26E9E7-0534-47EC-8C22-FB61066BF492}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EE111DDA-6F46-48B6-AA0E-A9DDFF4E96C0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EE728EEF-793E-43BD-88DA-3A24B3BE2A0E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EEB42EB0-7047-420F-91DB-60B15C2219B4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EEBFA1E6-216E-4E48-9C59-03BEDE1A8C71}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EEE36AAF-1325-4471-971C-7251FADBD191}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EEEC10E6-1B9F-4B2D-85A6-D2D32913AAF2}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EF2CA3B0-F307-48D6-85A8-862F8ED8D4A9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EF52F6BE-C192-4B3C-B35B-8E18170DBFF3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EF815286-6443-4891-B6AA-3C85B24E7B68}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EF87571A-A704-4D63-B30B-A28AA7941D19}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EF8AA4C6-8974-4417-81B5-0E151A425047}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EFD8CEB8-1A19-4FFF-B4B3-AE351F98BA9D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{EFE32B4F-A60A-42FB-9066-39E8DC7047BB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F003AB21-D7FA-4BFA-9756-4E5CF012DA37}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F007C1CC-F3BC-4360-B175-A8666C0D149F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F037CE25-E2F7-4B6F-92C4-52C37DA339DB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F07038F8-6680-4B8C-A51F-55EEF44356E0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F0784D72-A41A-4FBC-9543-904268CC8AF0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F0A51B0E-9459-49DF-A363-89F3951C6FDC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F0B49046-5432-48B1-83CD-84A9A9EF9EDF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F0C3AB67-1EEB-465D-9112-6F8CA5554E16}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F0C976F9-B5CB-40E5-94C7-2A94526B0B71}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F104754B-9567-418D-A33B-950286C3A5DE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F166120A-5057-4245-9A56-F52EC29E3D0B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F174D900-29B3-45AF-827D-01F3EC359529}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F17AAF92-A4E9-4286-B3A1-02B9E9D76A66}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F1B03C1E-B235-4C9A-8EB3-DC609BD0B53C}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F1EFF4F6-551B-4148-A9F6-B8CFE81758E9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F2CCD8D9-D144-47F2-BFDE-5316A47B0CAE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F2E4F72C-F48D-44F5-888D-36E18FD2393D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F2F118C8-C46B-4D48-85CC-0D134816DE92}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F2F373BD-A381-4671-A6E1-3F7E750BFC5E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F352833D-B6D1-4CC1-9799-B8DBCE91ABF4}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F37B1523-052B-42E3-94DF-EBB42090591B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F38290CF-87A8-45AE-8915-6FFAF711D7ED}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3A183D3-8874-45B9-9326-CECBC2AFACC9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3A7E6AF-AB2D-4227-8E48-7F264817D370}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3B6399F-AE7D-4B9F-B3E6-D6AA9C3F0712}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3C2440C-AD86-4B46-B35D-936FBF049728}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3C5A555-300B-4B92-AEC4-1F6EE2C542A1}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3C889C6-BF80-43D3-8E15-ECD5A54FEFEA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F3E08F6F-358F-4076-B8B3-827BBBA64261}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F42512BF-4BEE-429E-9DAB-4B689A9F0FC7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F476819B-90C7-4B21-A3AA-5641E24FFB12}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F47B4A3F-5AA0-4BB1-A3E1-6D73C8D1A33B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F482650B-4FE8-4E12-9EA1-55134A7B6683}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F4B75F69-C030-49D6-9560-3179ACF3B992}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F559B0A1-1D66-4DE2-90AB-FD03B3BB263D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F5CE834C-BD33-4879-A9A5-74FE15C3AD75}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F5CFE1C8-4EBE-48FC-8BC4-47BCA71A0A66}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F60AB5D9-0CF0-4C9F-B58D-E3D6DB7AE42B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F61A15AB-C730-4CD7-8AF8-0830AE10A85B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F62F98B4-2F28-43C6-B201-FEC3DA20394D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F66865A3-48B8-4EC3-9366-163ABA23C6CF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F69BABB2-F8B8-444A-B0E7-56DC2154EBDF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F6BCBDE2-EF7D-4BF9-A4E0-F51DE161BBF3}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F7388549-06BF-417B-8D1A-AD1565FCF92D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F74F366E-F4EF-4A31-A7BA-69CECD7CD149}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F758E1AC-C5E7-43C0-B7E4-B284A93FB00A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F7F5E0F8-C5E1-4A2C-87B6-CE79E67CE4C5}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F8052C9A-6844-4B48-9E51-41E7579B1007}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F81073FB-3482-4187-803B-2627EC5D1A35}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F869F690-138A-4B50-8881-E0D9FF75CF08}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F8DA6235-F774-4787-984A-5A05F9ACFD02}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F948CC09-CE97-4B29-9820-E018CD6C07DC}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F979767C-3D2B-4F54-9EA8-DE70F956C15B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F9AC281A-CBAD-45E7-BFB2-2E37C43B0C9F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F9BB563B-6225-48A2-B6ED-C39A7953030D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F9CACCCE-D9F1-497C-B665-2C4CFB2FE383}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{F9E7EE3D-4C36-433B-9CC1-18085C921800}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FA0C4A34-9648-4198-BE35-07DFA0B03C92}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FA23E7BC-A158-4FA6-923E-283C83814B23}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FA7D984B-6FA1-47BA-ADB1-63513BD85E0A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FAD58BF1-10D3-4192-82F6-A0AFEEC6E18A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FADB0872-C37C-42B7-907C-8779949B54DF}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FB008F09-4804-49C9-98A4-AD1BBEB0FD3B}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FB51F16A-7353-4AF7-937C-F16C939DCC27}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FBD73709-91A3-4928-A570-C74A0DEFF813}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FC54670E-28DF-4E4D-9FCA-F8C1FF3003A8}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FC58937C-32DE-478A-9E08-C848FBD668B7}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FC8AB63F-8D0D-4CB0-916E-4AB0BDB37B08}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FD037541-97AF-46B3-BE74-63BFE51CE38E}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FD42CB1E-F952-44A4-B2B4-9CDCC0417CEB}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FD9E9AEC-F2DD-416B-8037-04C29E7CB79D}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FDB07F6F-4079-4ACB-91F9-6452A23FBBAA}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FE0F97EF-92E3-4680-95A5-C394F56ED1CE}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FE5A1152-E547-4219-95BF-FBFCC4FB948F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FE95C2CB-C46E-4223-AC17-2E39F2AB8A3A}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FEB9D84C-4F13-47A0-80C6-044AD88EA330}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FEBD2764-B25E-4333-AFDA-F01321AD7F8F}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FF45406B-055F-4502-A3B0-7964DC8938C0}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FF66AA4A-0567-4956-9B03-58F0E48DAB27}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FF713606-FCE6-45C4-953A-C2EE3C501DB9}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FF9B6341-5A72-48C3-9289-0CC702F03061}
Successfully deleted: [Empty Folder] C:\Users\Moore\appdata\local\{FFD87A94-F065-44E1-B34D-6EDCF0CE5A11}
Successfully deleted: [Folder] "C:\ProgramData\ask"

 

~~~ FireFox

Successfully deleted: [File] C:\Users\Moore\AppData\Roaming\mozilla\firefox\profiles\q41e1e5p.default\bprotector_extensions.sqlite
Successfully deleted: [File] C:\Users\Moore\AppData\Roaming\mozilla\firefox\profiles\q41e1e5p.default\invalidprefs.js
Successfully deleted: [Folder] C:\Users\Moore\AppData\Roaming\mozilla\firefox\profiles\q41e1e5p.default\extensions\4jffxtbr@radiorage_4j.com
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\fbdownloader@kmcore
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@radiorage_4j.com/plugin

 

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\hgojaaaiddhmiiakpejiklijbalpckih

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 12/31/2013 at 19:23:14.01
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

# AdwCleaner v3.016 - Report created 31/12/2013 at 19:49:32
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Moore - MOORE-PC
# Running from : C:\Users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9YGBPALQ\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : CltMngSvc

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\RadioRage_4j
Folder Deleted : C:\Program Files (x86)\Searchprotect
Folder Deleted : C:\Users\Moore\AppData\Local\Searchprotect
Folder Deleted : C:\Users\Moore\AppData\Roaming\StatusWinks
[x] Not Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\Tasks\bProtector

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\9edadcb33dea49
Key Deleted : HKLM\SOFTWARE\9edadcb33dea49
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{48909954-14FB-4971-A7B3-47E7AF10B38A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5848763C-2668-44CA-ADBE-2999A6EE2858}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78BA36C9-6036-482B-B48D-ECCA6F964B84}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A661D4DC-4BD8-48FC-964B-A24AB8157DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48909954-14FB-4971-A7B3-47E7AF10B38A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5848763C-2668-44CA-ADBE-2999A6EE2858}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78BA36C9-6036-482B-B48D-ECCA6F964B84}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9638B7D6-11F5-4406-B387-327642A11FFB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48909954-14FB-4971-A7B3-47E7AF10B38A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5848763C-2668-44CA-ADBE-2999A6EE2858}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78BA36C9-6036-482B-B48D-ECCA6F964B84}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{434FA5E9-253E-4BD0-ADB6-7CE4CEA114CA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9638B7D6-11F5-4406-B387-327642A11FFB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F706E19B-6C14-4272-BA98-2F16636A898D}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{78BA36C9-6036-482B-B48D-ECCA6F964B84}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{78BA36C9-6036-482B-B48D-ECCA6F964B84}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{3C35AD63-AF1D-4E21-B484-B6651A8EFCF9}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A661D4DC-4BD8-48FC-964B-A24AB8157DE6}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [start Page]

-\\ Mozilla Firefox v12.0 (en-US)

[ File : C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\prefs.js ]

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : search_url
Deleted : keyword
Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [5462 octets] - [31/12/2013 19:45:51]
AdwCleaner[s0].txt - [4727 octets] - [31/12/2013 19:49:32]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [4787 octets] ##########
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.01.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

12/31/2013 7:56:44 PM
MBAM-log-2013-12-31 (20-12-40).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 230099
Time elapsed: 14 minute(s), 49 second(s)

Memory Processes Detected: 4
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4424 -> No action taken.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 4932 -> No action taken.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4980 -> No action taken.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 5284 -> No action taken.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 9
HKCR\CLSID\{44ed99e2-16a6-4b89-80d6-5b21cf42e78b} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCR\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCR\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCR\DynConIE.DynConIEObject.1 (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCR\DynConIE.DynConIEObject (PUP.Optional.SafeMonitor.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Websteroids (PUP.Optional.Websteroids.A) -> No action taken.

Registry Values Detected: 2
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Data: C:\ProgramData\Updater\updater.exe -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Data: C:\ProgramData\Updater\Updater.exe -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 14
C:\ProgramData\Websteroids (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\chrome (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\chrome\content (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\IE (PUP.Optional.Websteroids.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\CT3317212 (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\CT3319613 (PUP.Optional.Conduit.A) -> No action taken.
C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> No action taken.
C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> No action taken.
C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0 (PUP.Optional.MultiIE) -> No action taken.

Files Detected: 48
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> No action taken.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> No action taken.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> No action taken.
C:\ProgramData\Websteroids\IE\common.dll (PUP.Optional.SafeMonitor.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\mMamStub.exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nsmB4A2.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nsmFDC5.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nssBD4C.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nsx1AD.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nsx556.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\nsxB8D8.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\9YGBPALQ\Setup[1].exe (PUP.Optional.InternetUpdater.A) -> No action taken.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\HIZT0QBX\spstub[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\InstallConverter_brie.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\sp-downloader[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\SPSetup[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\ProgramData\Websteroids\app.dat (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Uninstall.exe (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Websteroids.ico (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\common.crx (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\announce.js (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\background.html (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\common.js (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\contentscript.js (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\icon.png (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\icon128.png (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\icon16.png (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\icon48.png (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\iframecontentscript.js (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Chrome\unzip\manifest.json (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\chrome.manifest (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\install.rdf (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\chrome\content\main.js (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Websteroids\Firefox\chrome\content\overlay.xul (PUP.Optional.Websteroids.A) -> No action taken.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\CT3317212\ddt.csf (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\AppData\Local\Temp\CT3319613\ddt.csf (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\announce.js (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\background.html (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\common.js (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\common.js.old (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\contentscript.js (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon.png (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon128.png (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon16.png (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon48.png (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\iframecontentscript.js (PUP.Optional.MultiIE) -> No action taken.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\manifest.json (PUP.Optional.MultiIE) -> No action taken.

(end)
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.01.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

12/31/2013 7:56:44 PM
mbam-log-2013-12-31 (19-56-44).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 230099
Time elapsed: 14 minute(s), 49 second(s)

Memory Processes Detected: 4
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4424 -> Delete on reboot.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 4932 -> Delete on reboot.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4980 -> Delete on reboot.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 5284 -> Delete on reboot.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 9
HKCR\CLSID\{44ed99e2-16a6-4b89-80d6-5b21cf42e78b} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCR\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCR\DynConIE.DynConIEObject.1 (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCR\DynConIE.DynConIEObject (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Websteroids (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.

Registry Values Detected: 2
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Data: C:\ProgramData\Updater\updater.exe -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Data: C:\ProgramData\Updater\Updater.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 14
C:\ProgramData\Websteroids (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\chrome (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\chrome\content (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\IE (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\CT3317212 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\CT3319613 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Delete on reboot.
C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Delete on reboot.
C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Delete on reboot.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0 (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.

Files Detected: 48
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Delete on reboot.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Delete on reboot.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Delete on reboot.
C:\ProgramData\Websteroids\IE\common.dll (PUP.Optional.SafeMonitor.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\mMamStub.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nsmB4A2.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nsmFDC5.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nssBD4C.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nsx1AD.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nsx556.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\nsxB8D8.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\9YGBPALQ\Setup[1].exe (PUP.Optional.InternetUpdater.A) -> Quarantined and deleted successfully.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\HIZT0QBX\spstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\InstallConverter_brie.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\sp-downloader[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\Local Settings\Temporary Internet Files\Content.IE5\MCZP53VW\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\app.dat (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Uninstall.exe (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Websteroids.ico (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\common.crx (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\announce.js (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\background.html (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\common.js (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\contentscript.js (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\icon.png (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\icon128.png (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\icon16.png (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\icon48.png (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\iframecontentscript.js (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Chrome\unzip\manifest.json (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\chrome.manifest (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\install.rdf (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\chrome\content\main.js (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Firefox\chrome\content\overlay.xul (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Delete on reboot.
C:\Users\Moore\AppData\Local\Temp\CT3317212\ddt.csf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Temp\CT3319613\ddt.csf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\announce.js (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\background.html (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\common.js (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\common.js.old (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\contentscript.js (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon.png (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon128.png (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon16.png (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\icon48.png (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\iframecontentscript.js (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.
C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\manifest.json (PUP.Optional.MultiIE) -> Quarantined and deleted successfully.

(end)
 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please visit this webpage and read the ComboFix User's Guide:

  • Once you've read the article and are ready to use the program you can download it directly from the link below.
  • Important! - Please make sure you save combofix to your desktop and do not run it from your browser
  • Direct download link for: ComboFix.exe
  • Please make sure you disable your security applications before running ComboFix.
  • Once Combofix has completed it will produce and open a log file. Please be patient as it can take some time to load.
  • Please copy/paste the contents or attach that log file to your next reply.
  • If needed the file can be located here: C:\combofix.txt
  • NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.
Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

still finishing steps 6 and 7

 

C:\$RECYCLE.BIN\S-1-5-21-4259660729-1901423613-4169603153-1001\$R4BUYON\WinZip170.exe a variant of Win32/OpenInstall application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\AppIntegrator64.exe.vir Win64/Toolbar.MyWebSearch.A application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\AppIntegratorStub64.dll.vir Win64/Toolbar.MyWebSearch.A application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\Hpg64.dll.vir Win64/Toolbar.MyWebSearch.A application
C:\ProgramData\Updater\Uninstall.exe a variant of Win32/ExFriendAlert.B application
C:\Users\All Users\Updater\Uninstall.exe a variant of Win32/ExFriendAlert.B application
C:\Users\Moore\Downloads\zyngaIE_toolbar.exe a variant of Win32/Toolbar.Conduit.B application
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Moore (administrator) on MOORE-PC on 31-12-2013 22:16:51
Running from C:\Users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIZT0QBX
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
() C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\BCMWLTRY.EXE
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) D:\HiPatchService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Dell) C:\Users\Moore\AppData\Local\Apps\2.0\4TXZL50T.9ZC\YR73L6VR.J3K\dell..tion_0f612f649c4a10af_0005.0004_3ddfe37344028d2c\DellSystemDetect.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [357376 2009-09-16] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8158240 2009-10-09] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\quickset.exe [3189016 2009-10-01] (Dell Inc.)
HKLM\...\Run: [broadcom Wireless Manager UI] - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE [4968960 2009-07-17] (Dell Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RadioRage Home Page Guard 64 bit] - "C:\PROGRA~2\RADIOR~2\bar\2.bin\AppIntegrator64.exe"
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM-x32\...\Run: [PDVDDXSrv] - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [140520 2009-12-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [462991 2010-06-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [bingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [DellSystemDetect] - C:\Users\Moore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms [370 2013-11-25] ()
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {C7A6FB61-CFC1-4E13-BD46-CF0110C45CED} URL =
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ ´Ñ;áa´[¦†8 º~RÙxœòÜ8'£-)x­ä­ URL =
BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 66.90.132.162 66.90.130.101

FireFox:
========
FF ProfilePath: C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default
FF NewTab: user_pref("browser.newtab.url", "");
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SearchEngineOrder.1: prefs.js
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF NetworkProxy: "no_proxies_on", "*.local"
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcgrawhill.com/ChemDrawMGH,version=12.0 - C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDrawMGH\NPCDPMGH32.dll (CambridgeSoft Corp.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Websteroids - C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\Extensions\support@websteroidsapp.com
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======


CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: http://www.google.com
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (McGraw-Hill ChemDraw) - C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDrawMGH\NPCDPMGH32.dll (CambridgeSoft Corp.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (RealDownloader) - C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0
CHR Extension: (Google Wallet) - C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R2 HiPatchService; D:\HiPatchService.exe [9216 2013-04-23] (Hi-Rez Studios)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE [33280 2009-07-17] ()

==================== Drivers (Whitelisted) ====================

S3 cpuz132; No ImagePath
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2013-03-09] ()

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-12-31 22:16 - 2013-12-31 22:16 - 00000000 ____D C:\FRST
2013-12-31 22:14 - 2013-12-31 22:14 - 00000798 _____ C:\Users\Moore\Desktop\eset.txt
2013-12-31 20:21 - 2013-12-31 20:21 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 19:46 - 2013-12-31 20:15 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 19:46 - 2013-12-31 20:15 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-31 19:45 - 2013-12-31 19:49 - 00000000 ____D C:\AdwCleaner
2013-12-31 19:23 - 2013-12-31 19:23 - 00158581 _____ C:\Users\Moore\Desktop\JRT.txt
2013-12-31 19:14 - 2013-12-31 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 19:07 - 2013-12-31 19:08 - 01034531 _____ (Thisisu) C:\Users\Moore\Downloads\JRT.exe
2013-12-31 18:44 - 2013-12-31 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-31 18:43 - 2013-12-31 18:43 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-31 18:42 - 2013-12-31 19:04 - 00000000 ____D C:\Users\Moore\Desktop\mbar
2013-12-28 22:47 - 2013-12-28 22:47 - 00023306 _____ C:\Users\Moore\Desktop\dds.txt
2013-12-28 22:47 - 2013-12-28 22:47 - 00009491 _____ C:\Users\Moore\Desktop\attach.txt
2013-12-28 22:07 - 2013-12-28 22:07 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.com
2013-12-28 22:06 - 2013-12-28 22:06 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.scr
2013-12-28 22:05 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Moore\Desktop\New folder (2)
2013-12-22 12:56 - 2013-12-29 11:21 - 01329044 _____ C:\Users\Moore\Desktop\Week 1 picks 2013.xlsx
2013-12-21 12:24 - 2013-12-30 21:42 - 01415659 _____ C:\Users\Moore\Desktop\2013-2014 College Bowl Picks.xlsx
2013-12-10 23:32 - 2013-05-09 23:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-10 23:32 - 2013-05-09 23:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-10 23:32 - 2013-05-09 22:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-10 23:32 - 2013-05-09 22:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-10 23:30 - 2013-11-26 05:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-10 23:30 - 2013-11-26 04:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-10 23:30 - 2013-11-26 04:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-10 23:30 - 2013-11-26 03:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-10 23:30 - 2013-11-26 03:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-10 23:30 - 2013-11-26 03:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-10 23:30 - 2013-11-26 03:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-10 23:30 - 2013-11-26 03:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-10 23:30 - 2013-11-26 03:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-10 23:30 - 2013-11-26 03:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-10 23:30 - 2013-11-26 03:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-10 23:30 - 2013-11-26 03:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-10 23:30 - 2013-11-26 03:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-10 23:30 - 2013-11-26 02:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-10 23:30 - 2013-11-26 02:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-10 23:30 - 2013-11-26 02:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-10 23:30 - 2013-11-26 02:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-10 23:30 - 2013-11-26 02:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-10 23:30 - 2013-11-26 01:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-10 23:30 - 2013-11-26 01:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-10 23:30 - 2013-11-26 00:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-10 23:30 - 2013-11-26 00:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-10 23:30 - 2013-11-26 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-10 23:30 - 2013-11-26 00:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-10 23:30 - 2013-11-26 00:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-10 23:29 - 2013-11-26 04:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-10 23:29 - 2013-11-26 02:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-10 23:29 - 2013-11-26 02:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-10 23:29 - 2013-11-26 02:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-10 23:29 - 2013-11-26 01:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-10 23:29 - 2013-11-26 01:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-10 20:07 - 2013-11-23 12:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-10 20:07 - 2013-11-23 11:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-10 20:07 - 2013-10-29 20:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-10 20:07 - 2013-10-29 20:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-10 20:07 - 2013-10-29 19:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-10 20:07 - 2013-10-18 20:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-10 20:07 - 2013-10-18 19:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-10 20:06 - 2013-11-11 20:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-10 20:06 - 2013-11-11 20:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-10 20:06 - 2013-10-11 20:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-10 20:06 - 2013-10-11 20:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-10 20:06 - 2013-10-11 20:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-10 20:06 - 2013-10-11 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-10 20:06 - 2013-10-11 19:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-10 20:06 - 2013-10-11 19:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-10 20:06 - 2013-10-11 19:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-10 20:06 - 2013-10-11 19:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-10 20:06 - 2013-10-03 20:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-10 20:06 - 2013-10-03 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 03:05 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-10 03:02 - 2013-12-10 03:02 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

==================== One Month Modified Files and Folders =======

2013-12-31 22:16 - 2013-12-31 22:16 - 00000000 ____D C:\FRST
2013-12-31 22:14 - 2013-12-31 22:14 - 00000798 _____ C:\Users\Moore\Desktop\eset.txt
2013-12-31 22:08 - 2012-05-12 09:30 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-31 21:43 - 2010-07-16 15:45 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-31 20:32 - 2009-07-13 22:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-31 20:32 - 2009-07-13 22:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-31 20:21 - 2013-12-31 20:21 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 20:20 - 2009-07-13 23:10 - 01773359 _____ C:\Windows\WindowsUpdate.log
2013-12-31 20:17 - 2013-11-25 20:33 - 00000000 ____D C:\Users\Moore\AppData\Local\Deployment
2013-12-31 20:16 - 2013-11-25 20:38 - 00006485 _____ C:\Windows\setupact.log
2013-12-31 20:16 - 2010-10-09 12:09 - 00000340 _____ C:\Windows\Tasks\AntiMalwarePro.job
2013-12-31 20:16 - 2010-07-16 15:45 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-31 20:16 - 2009-07-13 23:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-31 20:15 - 2013-12-31 19:46 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 20:15 - 2013-12-31 19:46 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-31 20:15 - 2010-04-29 13:50 - 01646628 _____ C:\Windows\PFRO.log
2013-12-31 19:53 - 2012-06-10 23:28 - 00000000 ____D C:\Users\Moore\AppData\Local\CrashDumps
2013-12-31 19:49 - 2013-12-31 19:45 - 00000000 ____D C:\AdwCleaner
2013-12-31 19:23 - 2013-12-31 19:23 - 00158581 _____ C:\Users\Moore\Desktop\JRT.txt
2013-12-31 19:14 - 2013-12-31 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 19:08 - 2013-12-31 19:07 - 01034531 _____ (Thisisu) C:\Users\Moore\Downloads\JRT.exe
2013-12-31 19:04 - 2013-12-31 18:44 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-31 19:04 - 2013-12-31 18:42 - 00000000 ____D C:\Users\Moore\Desktop\mbar
2013-12-31 18:43 - 2013-12-31 18:43 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-31 17:27 - 2013-05-22 19:31 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-12-30 21:42 - 2013-12-21 12:24 - 01415659 _____ C:\Users\Moore\Desktop\2013-2014 College Bowl Picks.xlsx
2013-12-29 11:21 - 2013-12-22 12:56 - 01329044 _____ C:\Users\Moore\Desktop\Week 1 picks 2013.xlsx
2013-12-28 22:47 - 2013-12-28 22:47 - 00023306 _____ C:\Users\Moore\Desktop\dds.txt
2013-12-28 22:47 - 2013-12-28 22:47 - 00009491 _____ C:\Users\Moore\Desktop\attach.txt
2013-12-28 22:45 - 2013-12-28 22:05 - 00000000 ____D C:\Users\Moore\Desktop\New folder (2)
2013-12-28 22:07 - 2013-12-28 22:07 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.com
2013-12-28 22:06 - 2013-12-28 22:06 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.scr
2013-12-15 03:03 - 2013-07-19 09:53 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 03:00 - 2010-06-19 08:49 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 18:02 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 16:37 - 2013-05-22 19:30 - 00000000 ____D C:\Program Files\My Dell
2013-12-12 16:37 - 2010-04-29 12:14 - 00000000 ____D C:\ProgramData\PCDr
2013-12-12 12:42 - 2009-07-13 23:08 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-11 17:08 - 2012-05-12 09:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 17:08 - 2012-05-12 09:30 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 17:08 - 2011-06-10 17:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 16:25 - 2009-07-13 23:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 16:24 - 2009-07-13 22:45 - 00342784 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-10 23:32 - 2011-01-17 17:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-10 03:23 - 2010-06-16 17:00 - 00001453 _____ C:\Users\Moore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-10 03:20 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-10 03:05 - 2013-11-26 12:46 - 00015363 _____ C:\Windows\IE11_main.log
2013-12-10 03:02 - 2013-12-10 03:02 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-06 17:23 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-03 14:38 - 2010-07-16 15:45 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 14:38 - 2010-07-16 15:45 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 18:37 - 2013-11-25 20:44 - 00389272 ____N C:\Windows\Minidump\120213-20763-01.dmp
2013-12-02 18:37 - 2010-07-17 16:12 - 00000000 ____D C:\Windows\Minidump

Files to move or delete:
====================
C:\Users\Moore\jagex_cl_loginapplet_LIVE.dat
C:\Users\Moore\jagex_cl_oldschool_LIVE.dat
C:\Users\Moore\jagex_cl_runescape_LIVE.dat
C:\Users\Moore\jagex_cl_runescape_LIVE1.dat
C:\Users\Moore\jagex_runescape_preferences.dat
C:\Users\Moore\jagex_runescape_preferences2.dat
C:\Users\Moore\jagex__preferences3.dat

Some content of TEMP:
====================
C:\Users\Moore\AppData\Local\Temp\dlLogic.exe
C:\Users\Moore\AppData\Local\Temp\GCVerifier.dll
C:\Users\Moore\AppData\Local\Temp\Quarantine.exe
C:\Users\Moore\AppData\Local\Temp\setup{B03CCAE3-866D-4382-A6C5-6AD58DB85463}.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-20 21:05

==================== End Of Log ============================

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013 01
Ran by Moore at 2013-12-31 22:18:03
Running from C:\Users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIZT0QBX
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
Accidental Damage Services Agreement (x32 Version: 2.0.0 - Dell Inc.)
Adobe AIR (x32 Version: 2.0.2.12610 - Adobe Systems Inc.)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.5.146 - Adobe Systems, Inc.)
Advanced Audio FX Engine (x32 Version: 1.12.05 - Creative Technology Ltd)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (Version: 8.59.29722 - Microsoft)
Atheros Driver Installation Program (x32 Version: 5.2 - Atheros)
Banctec Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
Bing Bar (x32 Version: 7.0.609.0 - Microsoft Corporation)
Bing Desktop (x32 Version: 1.3.171.0 - Microsoft Corporation)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
CambridgeSoft ChemDraw McGraw-Hill 12.0 (x32 Version: 12.0 - CambridgeSoft Corporation)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Complete Care Business Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
Consumer In-Home Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft)
Dasher (x32 Version:  - Internet Chess Club)
Dell DataSafe Online (x32 Version: 1.2.0009 - Dell, Inc.)
Dell Dock (Version: 2.0 - Stardock Corporation)
Dell Dock (x32 Version:  - Stardock Corporation)
Dell Edoc Viewer (Version: 1.0.0 - Dell Inc)
Dell Home Systems Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
Dell System Detect (HKCU Version: 5.4.0.4 - Dell)
Dell Touchpad (Version: 7.102.101.303 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (x32 Version: 1.40.05 - Creative Technology Ltd)
Dell Wireless WLAN Card Utility (Version: 5.30.21.0 - Dell Inc.)
ESET Online Scanner v3 (x32 Version:  - )
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.)
GoToAssist 8.0.0.514 (x32 Version:  - )
Haali Media Splitter (x32 Version:  - )
HHD Software Free Hex Editor Neo 5.14 (HKCU Version: 5.14.0.4787 - HHD Software, Ltd.)
Hi-Rez Studios Authenticate and Update Service (x32 Version: 3.0.0.0 - Hi-Rez Studios)
HP Product Detection (x32 Version: 11.14.0004 - HP)
iCloud (Version: 3.1.0.40 - Apple Inc.)
InstallIQ Updater (x32 Version: 1.4.3.0 - W3i, LLC)
Intel® Graphics Media Accelerator Driver (x32 Version: 8.15.10.2104 - Intel Corporation)
Intel® Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 17 (64-bit) (Version: 7.0.170 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Kits Configuration Installer (x32 Version: 8.59.25584 - Microsoft)
Live! Cam Avatar Creator (x32 Version: 4.6.5205.1 - Creative Technology Ltd)
Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Microsoft .NET Framework 1.1 (x32 Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Security Update (KB953297) (x32 Version:  - )
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation)
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft)
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation)
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft UI Engine (x32 Version: 6.3.2380.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Works (x32 Version: 9.7.0621 - Microsoft Corporation)
MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox 12.0 (x86 en-US) (x32 Version: 12.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 12.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (Version: 3.4.6422.14 - PC-Doctor, Inc.)
PokerStars.net (x32 Version:  - PokerStars.net)
PowerDVD DX (x32 Version: 8.3.6029 - CyberLink Corp.)
Premium Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
QualxServ Service Agreement (x32 Version: 2.0.0 - Dell Inc.)
Quickset64 (Version: 9.6.11 - Dell Inc.)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RadioRage Toolbar (x32 Version:  - Mindspark Interactive Network)
RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc)
RealPlayer (x32 Version: 16.0.0 - RealNetworks)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5951 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.)
Roxio Burn (x32 Version: 1.01 - Roxio)
Safari (x32 Version: 5.34.57.2 - Apple Inc.)
SDK Debuggers (x32 Version: 8.59.29746 - Microsoft Corporation)
Smite (x32 Version: 0.1.1581.2 - Hi-Rez Studios)
Speccy (Version: 1.20 - Piriform)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc)
Trend Micro™ Titanium™ (Version: 3.00 - Trend Micro Inc.)
TripControl 4.0 (x32 Version: 04.50.0017.016 - XATA Corporation)
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (x32 Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
Windows App Certification Kit Native Components (Version: 8.59.29736 - Microsoft Corporation)
Windows App Certification Kit x64 (x32 Version: 8.59.29750 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation)
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Software Development Kit (x32 Version: 8.59.29750 - Microsoft Corporation)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation)
Windows Software Development Kit EULA (x32 Version: 8.59.25584 - Microsoft Corporations)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.29750 - Microsoft Corporation)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.29699 - Microsoft Corporation)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.29699 - Microsoft Corporation)
Windows Software Development Kit Redistributables (x32 Version: 8.59.29750 - Microsoft Corporation)
WinZip 17.0 (Version: 17.0.10381 - WinZip Computing, S.L. )
WPT Redistributables (x32 Version: 8.59.29750 - Microsoft)
WPTx64 (x32 Version: 8.59.29722 - Microsoft)
Xata XML Core Services (x32 Version: 03.00.0000.000 - XATA Corporation)

==================== Restore Points  =========================

30-12-2013 23:53:09 Windows Update

==================== Hosts content: ==========================

2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0AAAA1D6-573D-4214-BB8B-F22374C749D9} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-05-13] (Microsoft)
Task: {10199DB8-05B6-4848-AD5D-DD849C427463} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {13B13C47-8E8B-424B-8CAC-FB5936B9ADDE} - \bProtector No Task File
Task: {422D396A-5403-4D11-A5E4-D9682DC23120} - System32\Tasks\AntiMalwarePro => C:\Program Files (x86)\AntimalewarePro\AntiMalware_Pro.exe
Task: {50B549D9-C57A-46ED-888A-CE3BA15F7ED3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {5DC1F736-6B87-46F4-9B47-3FC375702F45} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe
Task: {6364874E-A2F1-42BD-896A-6AB94140C8D3} - System32\Tasks\4695 => Wscript.exe C:\Users\Moore\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {63BE4B56-CD4A-4CB9-B7FA-337139AAD67D} - System32\Tasks\{B264D24C-3403-462A-88F1-CF9F3332EF48} => C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe
Task: {697A3D38-6E01-4220-94B3-1F5D557AEFE9} - System32\Tasks\RunAsStdUser Task => C:\Users\Moore\AppData\Local\KangoBoxSA\bin\1.0.3.0\KangoBoxSA.exe
Task: {6E465610-18B3-4ADA-BB15-843742D05944} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4259660729-1901423613-4169603153-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {7321C85D-6FD1-4678-85B2-04B7D08E3BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16] (Google Inc.)
Task: {831B389B-6AFB-4219-8C01-71FC6F04CDFE} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe
Task: {97A2DA1E-DB64-4B7D-9D2A-7D6F6306765C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9E206382-E1D9-4D81-98DF-BC276CF87C9F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16] (Google Inc.)
Task: {A93FF7A0-B5E3-4A0F-9586-373A0DF2CC5B} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {A9E53FA8-A005-485C-B6EB-5F1EB4D30681} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {AE27F7FF-9D01-4A9E-AAD4-2E5C429F7EC7} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {BACA0F23-4842-4141-9A29-399EADFB2A7E} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-12-06] (PC-Doctor, Inc.)
Task: {C1051D2F-8031-4706-8BF5-D0CEC9BDA253} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe
Task: {C3B418C3-7D73-4C8E-B263-41D93BDB33DE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4259660729-1901423613-4169603153-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {C9890C35-EA86-4F4E-B253-41FBD59E3DC8} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-05] (PC-Doctor, Inc.)
Task: {CD97D25A-94E4-4EFF-BC9C-D7B4325A0BB3} - System32\Tasks\D1234567\Administrator - Start WLAN Tray Applet => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE [2009-07-17] (Dell Inc.)
Task: {E0BB7AA0-D417-43C8-B841-7AB545CB300E} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {E113F753-4998-4825-AAA4-8EF5043EE9E1} - System32\Tasks\ffdshow manager => Sc.exe start ffdshow manager
Task: {E55218DD-EE09-4FA7-8F3D-227034DA4A25} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {E6345DC1-E51F-4EAC-B6A5-05624A50FABF} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\WSCStub.exe
Task: {EAC6BE86-A93E-44BD-BA6A-04A55476C059} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4259660729-1901423613-4169603153-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {FCE63BBF-4F70-41FC-978F-A2E769E0EF01} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4259660729-1901423613-4169603153-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AntiMalwarePro.job => C:\Program Files (x86)\AntimalewarePro\AntiMalware_Pro.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-04-29 12:03 - 2009-07-17 10:06 - 00058368 _____ () C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlrmt.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00275696 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00058608 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00095472 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00152816 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00017648 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
AlternateDataStreams: C:\Users\Moore\Downloads:Shareaza.GUID
AlternateDataStreams: C:\Users\Moore\Desktop\Dell  MSN.website:TASKICON_0favicon1129903636
AlternateDataStreams: C:\Users\Moore\Desktop\Dell  MSN.website:TASKICON_1favicon-298702541
AlternateDataStreams: C:\Users\Moore\Desktop\Dell  MSN.website:TASKICON_2favicon-1464078272
AlternateDataStreams: C:\Users\Moore\Desktop\Dell  MSN.website:TASKICON_4favicon640180837
AlternateDataStreams: C:\Users\Moore\Downloads\Driver Boost:Shareaza.GUID
AlternateDataStreams: C:\Users\Public\DRM:??????

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (12/31/2013 08:21:57 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/31/2013 08:21:53 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/31/2013 07:53:23 PM) (Source: Application Hang) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.16428 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1354

Start Time: 01cf069427cd2f46

Termination Time: 15

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (12/31/2013 07:53:21 PM) (Source: Application Error) (User: )
Description: Faulting application name: updater.exe, version: 1.0.0.1, time stamp: 0x52b217a4
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0xe94
Faulting application start time: 0xupdater.exe0
Faulting application path: updater.exe1
Faulting module path: updater.exe2
Report Id: updater.exe3

System errors:
=============
Error: (12/31/2013 07:39:09 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Microsoft Office Sessions:
=========================
Error: (07/14/2013 10:11:08 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 260 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/02/2013 10:27:19 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 254 seconds with 0 seconds of active time.  This session ended with a crash.

CodeIntegrity Errors:
===================================
  Date: 2013-08-06 10:23:38.151
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sfc_os.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-07-30 20:15:21.829
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sfc_os.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Percentage of memory in use: 49%
Total physical RAM: 3892.52 MB
Available physical RAM: 1970.37 MB
Total Pagefile: 7783.23 MB
Available Pagefile: 5836.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:58.59 GB) (Free:8.49 GB) NTFS
Drive d: () (Fixed) (Total:229.63 GB) (Free:225.27 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 8B5072E7)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=59 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=230 GB) - (Type=OF Extended)

==================== End Of Log ============================

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

ComboFix 13-12-31.01 - Moore 12/31/2013  22:26:57.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3893.1867 [GMT -6:00]
Running from: c:\users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9YGBPALQ\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6422\AddOnDownloaded\1aff7cd0-71c5-4682-8a81-f3488d648a52.dll
c:\programdata\PCDr\6422\AddOnDownloaded\4024761b-0217-45f9-98b3-a2cd8c309252.dll
c:\programdata\PCDr\6422\AddOnDownloaded\5eb0ad41-431b-4bf8-b498-110b0b5cd0ab.dll
c:\programdata\PCDr\6422\AddOnDownloaded\61c13bfc-28f4-44bc-beec-efa429fa40f0.dll
c:\programdata\PCDr\6422\AddOnDownloaded\721f0e40-f9ae-403d-b919-f31f136f926d.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a42876a0-cd50-444f-b999-c31d0b73f57c.dll
c:\programdata\PCDr\6422\AddOnDownloaded\b46fef86-eb4a-44db-ad48-0c00477a0097.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ec1edaed-f34f-4e3a-96eb-bbdad2af9a8a.dll
c:\programdata\PCDr\6422\AddOnDownloaded\f63e05a5-1f40-4c42-b80a-d0995b6e38a7.dll
.
.
(((((((((((((((((((((((((   Files Created from 2013-12-01 to 2014-01-01  )))))))))))))))))))))))))))))))
.
.
2014-01-01 04:39 . 2014-01-01 04:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-01 04:16 . 2014-01-01 04:16 -------- d-----w- C:\FRST
2014-01-01 02:21 . 2014-01-01 02:21 -------- d-----w- c:\program files (x86)\ESET
2014-01-01 01:46 . 2014-01-01 02:15 -------- d-----w- c:\programdata\RHelpers
2014-01-01 01:46 . 2014-01-01 02:15 -------- d-----w- c:\programdata\Updater
2014-01-01 01:45 . 2014-01-01 01:49 -------- d-----w- C:\AdwCleaner
2014-01-01 01:20 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BB2E3F39-590B-4FB9-888F-E67DBA950C17}\mpengine.dll
2014-01-01 01:14 . 2014-01-01 01:14 -------- d-----w- c:\windows\ERUNT
2014-01-01 00:44 . 2014-01-01 01:04 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-01-01 00:43 . 2014-01-01 00:43 89304 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2013-12-30 23:53 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-12-11 05:32 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-11 05:32 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-11 05:32 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-11 05:32 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-11 05:32 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2013-12-11 05:29 . 2013-11-26 08:02 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-12-11 05:29 . 2013-11-26 07:48 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-12-11 05:29 . 2013-11-26 08:16 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-12-11 05:29 . 2013-11-26 08:35 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-12-11 02:07 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-12-11 02:07 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-12-11 02:07 . 2013-10-30 01:24 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-12-11 02:07 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-12-11 02:07 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-11 02:07 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-11 02:07 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-12-11 02:06 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-11 02:06 . 2013-11-12 02:07 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-12-11 02:06 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-11 02:06 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-11 02:06 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2013-12-11 02:06 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2013-12-11 02:06 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2013-12-11 02:06 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2013-12-11 02:06 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2013-12-11 02:06 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2013-12-11 02:06 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2013-12-11 02:06 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2013-12-10 09:05 . 2013-10-15 00:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-12-06 16:29 . 2013-10-19 04:23 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{665E94C7-C34F-424D-830A-F2A35960B26E}\gapaengine.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-15 09:00 . 2010-06-19 14:49 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-11 23:08 . 2012-05-12 15:30 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-11 23:08 . 2011-06-10 23:16 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-19 10:21 . 2011-01-18 00:03 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-19 04:23 . 2012-02-10 18:09 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-10-12 02:30 . 2013-11-15 00:07 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:29 . 2013-11-15 00:07 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:29 . 2013-11-15 00:07 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-12 02:03 . 2013-11-15 00:07 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-10-12 02:01 . 2013-11-15 00:07 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2013-10-08 12:50 . 2013-10-16 17:32 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-05 20:25 . 2013-11-15 00:07 1474048 ----a-w- c:\windows\system32\crypt32.dll
2013-10-05 19:57 . 2013-11-15 00:07 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-10-04 02:28 . 2013-11-27 01:58 190464 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 02:25 . 2013-11-27 01:58 197120 ----a-w- c:\windows\system32\credui.dll
2013-10-04 02:24 . 2013-11-27 01:58 1930752 ----a-w- c:\windows\system32\authui.dll
2013-10-04 01:58 . 2013-11-27 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2013-10-04 01:56 . 2013-11-27 01:58 168960 ----a-w- c:\windows\SysWow64\credui.dll
2013-10-04 01:56 . 2013-11-27 01:58 1796096 ----a-w- c:\windows\SysWow64\authui.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-12-29 140520]
"Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2009-11-13 1807600]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-06-18 462991]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-12-16 498160]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-06-20 2249352]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-02 152392]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe /firstrun [2009-12-15 1324384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe;c:\program files\Dell\DellDock\DockLogin.exe [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;d:\hipatchservice.exe;d:\HiPatchService.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-06 00:44 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-01-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 23:08]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16 21:45]
.
2014-01-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16 21:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-09-16 357376]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-09 8158240]
"Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-07 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-07 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-07 413720]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\system32\blank.htm
uInternet Settings,ProxyOverride = *.local
Trusted Zone: dell.com
TCP: DhcpNameServer = 66.90.132.162 66.90.130.101
FF - ProfilePath - c:\users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-RadioRage Home Page Guard 64 bit - c:\progra~2\RADIOR~2\bar\2.bin\AppIntegrator64.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-12-31  22:55:16
ComboFix-quarantined-files.txt  2014-01-01 04:55
.
Pre-Run: 9,019,867,136 bytes free
Post-Run: 10,604,355,584 bytes free
.
- - End Of File - - B346E852A66C429AB5B5DF5305D6BCBA
A36C5E4F47E84449FF07ED3517B43A31
 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please reveiw the directions again.  You ran these tools from your Web browser you did not SAVE them to your DESKTOP

FRST program ran from Internet Explorer temp
Running from C:\Users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIZT0QBX

Combofix program ran from Internet Explorer temp
Running from: c:\users\Moore\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9YGBPALQ\ComboFix.exe

Please clear your brower cache and try again.  This time do not run the program.  Select File Save-As and save them to your deskotp.

Then quit your browser and run the programs from your desktop.

 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

1/1/2014 6:48:03 PM
mbar-log-2014-01-01 (18-48-03).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 255283
Time elapsed: 18 minute(s), 24 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
 

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.128000 GHz
Memory total: 4081606656, free: 2613039104

Downloaded database version: v2014.01.01.06
Downloaded database version: v2013.12.18.01
=======================================
Initializing...
------------ Kernel report ------------
     01/01/2014 18:47:57
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\MpFilter.sys
\SystemRoot\System32\Drivers\PxHlpa64.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\igdkmd64.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\bcmwl664.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\drivers\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\Apfiltr.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\DRIVERS\Impcd.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\drivers\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\IntcDAud.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_msahci.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\dc3d.sys
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\point64.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\drivers\BCM42RLY.sys
\SystemRoot\system32\drivers\spsys.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\user32.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8004bbf060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa8004911060
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8004bbf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8004bbfb90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8004bbf060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8004911060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 8B5072E7

Partition information:

    Partition 0 type is Other (0xde)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 2048  Numsec = 204800

    Partition 1 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 206848  Numsec = 20480000
    Partition file system is NTFS
    Partition is bootable

    Partition 2 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 20686848  Numsec = 122880000

    Partition 3 type is Extended with LBA (0xf)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 143566848  Numsec = 481572864

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-625122448-625142448)...
Done!
Scan finished
=======================================

Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_0_1_206848_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...
Removal finished
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by Moore on Wed 01/01/2014 at 19:10:34.52
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

 

~~~ Registry Values

 

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\dynconie

 

~~~ Files

 

~~~ Folders

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 01/01/2014 at 19:18:29.96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

# AdwCleaner v3.016 - Report created 01/01/2014 at 19:30:06
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Moore - MOORE-PC
# Running from : C:\Users\Moore\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\Windows\System32\roboot64.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Mozilla Firefox v12.0 (en-US)

[ File : C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\prefs.js ]

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [5462 octets] - [31/12/2013 19:45:51]
AdwCleaner[R1].txt - [1062 octets] - [01/01/2014 19:26:22]
AdwCleaner[s0].txt - [4883 octets] - [31/12/2013 19:49:32]
AdwCleaner[s1].txt - [987 octets] - [01/01/2014 19:30:06]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [1046 octets] ##########
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.01.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Moore :: MOORE-PC [administrator]

1/1/2014 7:36:07 PM
mbam-log-2014-01-01 (19-36-07).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 218017
Time elapsed: 7 minute(s), 49 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKLM\SOFTWARE\Classes\AppID\DynConIE.DLL (PUP.Optional.DynConIE.A) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\$RECYCLE.BIN\S-1-5-21-4259660729-1901423613-4169603153-1001\$RNO0I8W.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.

(end)
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\AppIntegrator64.exe.vir Win64/Toolbar.MyWebSearch.A application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\AppIntegratorStub64.dll.vir Win64/Toolbar.MyWebSearch.A application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\RadioRage_4j\bar\2.bin\Hpg64.dll.vir Win64/Toolbar.MyWebSearch.A application
C:\ProgramData\Updater\Uninstall.exe a variant of Win32/ExFriendAlert.B application
C:\Users\All Users\Updater\Uninstall.exe a variant of Win32/ExFriendAlert.B application
C:\Users\Moore\Downloads\zyngaIE_toolbar.exe a variant of Win32/Toolbar.Conduit.B application
 

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2014 01
Ran by Moore (administrator) on MOORE-PC on 01-01-2014 21:09:27
Running from C:\Users\Moore\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\BCMWLTRY.EXE
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Hi-Rez Studios) D:\HiPatchService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [357376 2009-09-16] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8158240 2009-10-09] (Realtek Semiconductor)
HKLM\...\Run: [broadcom Wireless Manager UI] - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE [4968960 2009-07-17] (Dell Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RadioRage Home Page Guard 64 bit] - "C:\PROGRA~2\RADIOR~2\bar\2.bin\AppIntegrator64.exe"
HKLM-x32\...\Run: [PDVDDXSrv] - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [140520 2009-12-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [462991 2010-06-18] (Creative Technology Ltd)
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [bingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {C7A6FB61-CFC1-4E13-BD46-CF0110C45CED} URL =
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ ´Ñ;áa´[¦†8 º~RÙxœòÜ8'£-)x­ä­ URL =
BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 66.90.132.162 66.90.130.101

FireFox:
========
FF ProfilePath: C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default
FF NewTab: user_pref("browser.newtab.url", "");
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SearchEngineOrder.1: prefs.js
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF NetworkProxy: "no_proxies_on", "*.local"
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcgrawhill.com/ChemDrawMGH,version=12.0 - C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDrawMGH\NPCDPMGH32.dll (CambridgeSoft Corp.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Websteroids - C:\Users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\Extensions\support@websteroidsapp.com
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======


CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: http://www.google.com
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (McGraw-Hill ChemDraw) - C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDrawMGH\NPCDPMGH32.dll (CambridgeSoft Corp.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (RealDownloader) - C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0
CHR Extension: (Google Wallet) - C:\Users\Moore\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R2 HiPatchService; D:\HiPatchService.exe [9216 2013-04-23] (Hi-Rez Studios)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE [33280 2009-07-17] ()

==================== Drivers (Whitelisted) ====================

S3 cpuz132; No ImagePath
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15712 2013-03-09] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-01 21:09 - 2014-01-01 21:09 - 00019997 _____ C:\Users\Moore\Desktop\FRST.txt
2014-01-01 21:08 - 2014-01-01 21:08 - 01931426 _____ (Farbar) C:\Users\Moore\Desktop\FRST64.exe
2014-01-01 19:50 - 2014-01-01 19:51 - 02347384 _____ (ESET) C:\Users\Moore\Desktop\esetsmartinstaller_enu.exe
2014-01-01 19:25 - 2014-01-01 19:25 - 01233962 _____ C:\Users\Moore\Desktop\AdwCleaner.exe
2014-01-01 19:18 - 2014-01-01 19:18 - 00000729 _____ C:\Users\Moore\Desktop\JRT.txt
2014-01-01 19:10 - 2014-01-01 19:10 - 01036305 _____ (Thisisu) C:\Users\Moore\Desktop\JRT.exe
2014-01-01 18:47 - 2014-01-01 19:06 - 00000000 ____D C:\Users\Moore\Desktop\mbar
2014-01-01 18:38 - 2014-01-01 18:38 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Moore\Desktop\mbar-1.07.0.1008.exe
2013-12-31 22:55 - 2013-12-31 22:55 - 00020606 _____ C:\ComboFix.txt
2013-12-31 22:24 - 2011-06-26 00:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-31 22:24 - 2010-11-07 11:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-31 22:24 - 2009-04-19 22:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-31 22:24 - 2000-08-30 18:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-31 22:24 - 2000-08-30 18:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-31 22:24 - 2000-08-30 18:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-31 22:24 - 2000-08-30 18:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-31 22:24 - 2000-08-30 18:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-31 22:23 - 2013-12-31 22:56 - 00000000 ____D C:\Qoobox
2013-12-31 22:16 - 2013-12-31 22:16 - 00000000 ____D C:\FRST
2013-12-31 22:14 - 2014-01-01 21:04 - 00000668 _____ C:\Users\Moore\Desktop\eset.txt
2013-12-31 20:21 - 2013-12-31 20:21 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 19:46 - 2013-12-31 20:15 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 19:46 - 2013-12-31 20:15 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-31 19:45 - 2014-01-01 19:30 - 00000000 ____D C:\AdwCleaner
2013-12-31 19:14 - 2013-12-31 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 19:07 - 2013-12-31 19:08 - 01034531 _____ (Thisisu) C:\Users\Moore\Downloads\JRT.exe
2013-12-31 18:44 - 2014-01-01 19:06 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-31 18:43 - 2014-01-01 18:47 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-28 22:07 - 2013-12-28 22:07 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.com
2013-12-28 22:06 - 2013-12-28 22:06 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.scr
2013-12-28 22:05 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Moore\Desktop\New folder (2)
2013-12-22 12:56 - 2013-12-29 11:21 - 01329044 _____ C:\Users\Moore\Desktop\Week 1 picks 2013.xlsx
2013-12-21 12:24 - 2013-12-30 21:42 - 01415659 _____ C:\Users\Moore\Desktop\2013-2014 College Bowl Picks.xlsx
2013-12-10 23:32 - 2013-05-09 23:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-10 23:32 - 2013-05-09 23:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-10 23:32 - 2013-05-09 22:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-10 23:32 - 2013-05-09 22:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-10 23:30 - 2013-11-26 05:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-10 23:30 - 2013-11-26 04:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-10 23:30 - 2013-11-26 04:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-10 23:30 - 2013-11-26 03:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-10 23:30 - 2013-11-26 03:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-10 23:30 - 2013-11-26 03:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-10 23:30 - 2013-11-26 03:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-10 23:30 - 2013-11-26 03:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-10 23:30 - 2013-11-26 03:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-10 23:30 - 2013-11-26 03:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-10 23:30 - 2013-11-26 03:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-10 23:30 - 2013-11-26 03:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-10 23:30 - 2013-11-26 03:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-10 23:30 - 2013-11-26 02:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-10 23:30 - 2013-11-26 02:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-10 23:30 - 2013-11-26 02:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-10 23:30 - 2013-11-26 02:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-10 23:30 - 2013-11-26 02:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-10 23:30 - 2013-11-26 01:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-10 23:30 - 2013-11-26 01:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-10 23:30 - 2013-11-26 00:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-10 23:30 - 2013-11-26 00:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-10 23:30 - 2013-11-26 00:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-10 23:30 - 2013-11-26 00:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-10 23:30 - 2013-11-26 00:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-10 23:29 - 2013-11-26 04:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-10 23:29 - 2013-11-26 02:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-10 23:29 - 2013-11-26 02:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-10 23:29 - 2013-11-26 02:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-10 23:29 - 2013-11-26 01:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-10 23:29 - 2013-11-26 01:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-10 20:07 - 2013-11-23 12:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-10 20:07 - 2013-11-23 11:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-10 20:07 - 2013-10-29 20:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-10 20:07 - 2013-10-29 20:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-10 20:07 - 2013-10-29 19:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-10 20:07 - 2013-10-18 20:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-10 20:07 - 2013-10-18 19:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-10 20:06 - 2013-11-11 20:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-10 20:06 - 2013-11-11 20:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-10 20:06 - 2013-10-11 20:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-10 20:06 - 2013-10-11 20:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-10 20:06 - 2013-10-11 20:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-10 20:06 - 2013-10-11 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-10 20:06 - 2013-10-11 19:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-10 20:06 - 2013-10-11 19:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-10 20:06 - 2013-10-11 19:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-10 20:06 - 2013-10-11 19:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-10 20:06 - 2013-10-03 20:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-10 20:06 - 2013-10-03 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 03:05 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-10 03:02 - 2013-12-10 03:02 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

==================== One Month Modified Files and Folders =======

2014-01-01 21:10 - 2014-01-01 21:09 - 00019997 _____ C:\Users\Moore\Desktop\FRST.txt
2014-01-01 21:08 - 2014-01-01 21:08 - 01931426 _____ (Farbar) C:\Users\Moore\Desktop\FRST64.exe
2014-01-01 21:08 - 2012-05-12 09:30 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-01 21:04 - 2013-12-31 22:14 - 00000668 _____ C:\Users\Moore\Desktop\eset.txt
2014-01-01 20:43 - 2010-07-16 15:45 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-01 20:08 - 2009-07-13 23:10 - 01855971 _____ C:\Windows\WindowsUpdate.log
2014-01-01 19:52 - 2009-07-13 22:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-01 19:52 - 2009-07-13 22:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-01 19:51 - 2014-01-01 19:50 - 02347384 _____ (ESET) C:\Users\Moore\Desktop\esetsmartinstaller_enu.exe
2014-01-01 19:45 - 2013-11-25 20:38 - 00007614 _____ C:\Windows\setupact.log
2014-01-01 19:45 - 2010-07-16 15:45 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-01 19:45 - 2010-04-29 13:50 - 01647552 _____ C:\Windows\PFRO.log
2014-01-01 19:45 - 2009-07-13 23:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-01 19:30 - 2013-12-31 19:45 - 00000000 ____D C:\AdwCleaner
2014-01-01 19:25 - 2014-01-01 19:25 - 01233962 _____ C:\Users\Moore\Desktop\AdwCleaner.exe
2014-01-01 19:18 - 2014-01-01 19:18 - 00000729 _____ C:\Users\Moore\Desktop\JRT.txt
2014-01-01 19:10 - 2014-01-01 19:10 - 01036305 _____ (Thisisu) C:\Users\Moore\Desktop\JRT.exe
2014-01-01 19:06 - 2014-01-01 18:47 - 00000000 ____D C:\Users\Moore\Desktop\mbar
2014-01-01 19:06 - 2013-12-31 18:44 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-01 18:47 - 2013-12-31 18:43 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-01 18:38 - 2014-01-01 18:38 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Moore\Desktop\mbar-1.07.0.1008.exe
2014-01-01 18:28 - 2013-05-22 19:31 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-12-31 22:56 - 2013-12-31 22:23 - 00000000 ____D C:\Qoobox
2013-12-31 22:55 - 2013-12-31 22:55 - 00020606 _____ C:\ComboFix.txt
2013-12-31 22:51 - 2013-03-09 19:27 - 00000000 ____D C:\Windows\ERDNT
2013-12-31 22:43 - 2009-07-13 20:34 - 00000215 _____ C:\Windows\system.ini
2013-12-31 22:16 - 2013-12-31 22:16 - 00000000 ____D C:\FRST
2013-12-31 20:21 - 2013-12-31 20:21 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 20:17 - 2013-11-25 20:33 - 00000000 ____D C:\Users\Moore\AppData\Local\Deployment
2013-12-31 20:15 - 2013-12-31 19:46 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 20:15 - 2013-12-31 19:46 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-31 19:53 - 2012-06-10 23:28 - 00000000 ____D C:\Users\Moore\AppData\Local\CrashDumps
2013-12-31 19:14 - 2013-12-31 19:14 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 19:08 - 2013-12-31 19:07 - 01034531 _____ (Thisisu) C:\Users\Moore\Downloads\JRT.exe
2013-12-30 21:42 - 2013-12-21 12:24 - 01415659 _____ C:\Users\Moore\Desktop\2013-2014 College Bowl Picks.xlsx
2013-12-29 11:21 - 2013-12-22 12:56 - 01329044 _____ C:\Users\Moore\Desktop\Week 1 picks 2013.xlsx
2013-12-28 22:45 - 2013-12-28 22:05 - 00000000 ____D C:\Users\Moore\Desktop\New folder (2)
2013-12-28 22:07 - 2013-12-28 22:07 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.com
2013-12-28 22:06 - 2013-12-28 22:06 - 00688992 ____R (Swearware) C:\Users\Moore\Desktop\dds.scr
2013-12-15 03:03 - 2013-07-19 09:53 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 03:00 - 2010-06-19 08:49 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-12 18:02 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\rescache
2013-12-12 16:37 - 2013-05-22 19:30 - 00000000 ____D C:\Program Files\My Dell
2013-12-12 16:37 - 2010-04-29 12:14 - 00000000 ____D C:\ProgramData\PCDr
2013-12-12 12:42 - 2009-07-13 23:08 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-11 17:08 - 2012-05-12 09:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 17:08 - 2012-05-12 09:30 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 17:08 - 2011-06-10 17:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 16:25 - 2009-07-13 23:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 16:24 - 2009-07-13 22:45 - 00342784 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-10 23:32 - 2011-01-17 17:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-10 03:23 - 2010-06-16 17:00 - 00001453 _____ C:\Users\Moore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-10 03:20 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-10 03:05 - 2013-11-26 12:46 - 00015363 _____ C:\Windows\IE11_main.log
2013-12-10 03:02 - 2013-12-10 03:02 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-10 03:02 - 2013-12-10 03:02 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-10 03:02 - 2013-12-10 03:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-10 03:02 - 2013-12-10 03:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-10 03:02 - 2013-12-10 03:02 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-10 03:02 - 2013-12-10 03:02 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-06 17:23 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-03 14:38 - 2010-07-16 15:45 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 14:38 - 2010-07-16 15:45 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 18:37 - 2013-11-25 20:44 - 00389272 ____N C:\Windows\Minidump\120213-20763-01.dmp
2013-12-02 18:37 - 2010-07-17 16:12 - 00000000 ____D C:\Windows\Minidump

Files to move or delete:
====================
C:\Users\Moore\jagex_cl_loginapplet_LIVE.dat
C:\Users\Moore\jagex_cl_oldschool_LIVE.dat
C:\Users\Moore\jagex_cl_runescape_LIVE.dat
C:\Users\Moore\jagex_cl_runescape_LIVE1.dat
C:\Users\Moore\jagex_runescape_preferences.dat
C:\Users\Moore\jagex_runescape_preferences2.dat
C:\Users\Moore\jagex__preferences3.dat

Some content of TEMP:
====================
C:\Users\Moore\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-20 21:05

==================== End Of Log ============================

Link to post
Share on other sites
chessder58

chessder58

Posted
  • Author
Posted

ComboFix 14-01-01.01 - Moore 01/01/2014  21:21:42.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3893.2170 [GMT -6:00]
Running from: c:\users\Moore\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6422\AddOnDownloaded\1aff7cd0-71c5-4682-8a81-f3488d648a52.dll
c:\programdata\PCDr\6422\AddOnDownloaded\4024761b-0217-45f9-98b3-a2cd8c309252.dll
c:\programdata\PCDr\6422\AddOnDownloaded\5eb0ad41-431b-4bf8-b498-110b0b5cd0ab.dll
c:\programdata\PCDr\6422\AddOnDownloaded\61c13bfc-28f4-44bc-beec-efa429fa40f0.dll
c:\programdata\PCDr\6422\AddOnDownloaded\721f0e40-f9ae-403d-b919-f31f136f926d.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a42876a0-cd50-444f-b999-c31d0b73f57c.dll
c:\programdata\PCDr\6422\AddOnDownloaded\b46fef86-eb4a-44db-ad48-0c00477a0097.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ec1edaed-f34f-4e3a-96eb-bbdad2af9a8a.dll
c:\programdata\PCDr\6422\AddOnDownloaded\f63e05a5-1f40-4c42-b80a-d0995b6e38a7.dll
.
.
(((((((((((((((((((((((((   Files Created from 2013-12-02 to 2014-01-02  )))))))))))))))))))))))))))))))
.
.
2014-01-02 03:33 . 2014-01-02 03:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-02 01:42 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2FB123EB-8FE0-418B-BCDF-5C3378965A07}\mpengine.dll
2014-01-02 01:21 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-01-01 04:16 . 2014-01-01 04:16 -------- d-----w- C:\FRST
2014-01-01 02:21 . 2014-01-01 02:21 -------- d-----w- c:\program files (x86)\ESET
2014-01-01 01:46 . 2014-01-01 02:15 -------- d-----w- c:\programdata\RHelpers
2014-01-01 01:46 . 2014-01-01 02:15 -------- d-----w- c:\programdata\Updater
2014-01-01 01:45 . 2014-01-02 01:30 -------- d-----w- C:\AdwCleaner
2014-01-01 01:14 . 2014-01-01 01:14 -------- d-----w- c:\windows\ERUNT
2014-01-01 00:44 . 2014-01-02 01:06 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-01-01 00:43 . 2014-01-02 00:47 89304 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2013-12-11 05:32 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-11 05:32 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-11 05:32 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-11 05:32 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-11 05:32 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2013-12-11 05:29 . 2013-11-26 08:02 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-12-11 05:29 . 2013-11-26 07:48 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-12-11 05:29 . 2013-11-26 08:16 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-12-11 05:29 . 2013-11-26 08:35 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-12-11 02:07 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-12-11 02:07 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-12-11 02:07 . 2013-10-30 01:24 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-12-11 02:07 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-12-11 02:07 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-11 02:07 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-11 02:07 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-12-11 02:06 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-11 02:06 . 2013-11-12 02:07 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-12-11 02:06 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-11 02:06 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-11 02:06 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2013-12-11 02:06 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll
2013-12-11 02:06 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx
2013-12-11 02:06 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll
2013-12-11 02:06 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe
2013-12-11 02:06 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe
2013-12-11 02:06 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe
2013-12-11 02:06 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe
2013-12-10 09:05 . 2013-10-15 00:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-12-06 16:29 . 2013-10-19 04:23 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{665E94C7-C34F-424D-830A-F2A35960B26E}\gapaengine.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-15 09:00 . 2010-06-19 14:49 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-11 23:08 . 2012-05-12 15:30 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-11 23:08 . 2011-06-10 23:16 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-19 10:21 . 2011-01-18 00:03 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-19 04:23 . 2012-02-10 18:09 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-10-12 02:30 . 2013-11-15 00:07 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:29 . 2013-11-15 00:07 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:29 . 2013-11-15 00:07 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-12 02:03 . 2013-11-15 00:07 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-10-12 02:01 . 2013-11-15 00:07 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2013-10-08 12:50 . 2013-10-16 17:32 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-05 20:25 . 2013-11-15 00:07 1474048 ----a-w- c:\windows\system32\crypt32.dll
2013-10-05 19:57 . 2013-11-15 00:07 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-12-29 140520]
"Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2009-11-13 1807600]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-06-18 462991]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-12-16 498160]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-06-20 2249352]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-02 152392]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe /firstrun [2009-12-15 1324384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0;PCDSRVC{D3412D80-CF3B4A27-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\my dell\pcdsrvc_x64.pkms;c:\program files\my dell\pcdsrvc_x64.pkms [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys;c:\windows\SYSNATIVE\DRIVERS\SWDUMon.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe;c:\program files\Dell\DellDock\DockLogin.exe [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;d:\hipatchservice.exe;d:\HiPatchService.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-06 00:44 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-01-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 23:08]
.
2014-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16 21:45]
.
2014-01-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-16 21:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-09-16 357376]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-09 8158240]
"Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
"RadioRage Home Page Guard 64 bit"="c:\progra~2\RADIOR~2\bar\2.bin\AppIntegrator64.exe" [bU]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-07 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-07 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-07 413720]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\system32\blank.htm
uInternet Settings,ProxyOverride = *.local
Trusted Zone: dell.com
TCP: DhcpNameServer = 66.90.132.162 66.90.130.101
FF - ProfilePath - c:\users\Moore\AppData\Roaming\Mozilla\Firefox\Profiles\q41e1e5p.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{D3412D80-CF3B4A27-06020200}_0]
"ImagePath"="\??\c:\program files\my dell\pcdsrvc_x64.pkms"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-01-01  21:45:03
ComboFix-quarantined-files.txt  2014-01-02 03:45
ComboFix2.txt  2014-01-01 04:55
.
Pre-Run: 11,464,810,496 bytes free
Post-Run: 11,263,807,488 bytes free
.
- - End Of File - - C225F674174BB30782A535E92CD3738F
A36C5E4F47E84449FF07ED3517B43A31
 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.
 

fixlist.txt

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.