feed.helper.com and snapdo please help

wpeters · March 18, 2014

This was posted earlier by another member but was unresolved. I'm having the exact same thing happen to my me. Can you help??? Thanks!

WP

Hi,

So when I started my PC (Windows 7) up today and used google chrome something strange happened.

When I open a new tab, it goes to my new tab page, then it gets redirected to http://feed.helperbar.com/?p=(Random letters and numbers) which then redirects to http://search.snapdo.com/?st=nt&q=

So I looked those up on google and they all said to remove it using add/remove programs, and remove it from the extensions, New page tab and search engine. But those are all correct.

There's nothing about them, since it doesn't go to those websites straight away. It goes to my new tab page first, and then gets redirected.

Does anyone know what this is?

Thanks in advance.

aharonov · March 18, 2014

Hello,

let's have a look:

Please download Farbar Recovery Scan Tool and save it to your Desktop.

(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)

Start FRST with administator privileges.
Make sure the option Addition.txt is checked and press the Scan button.
When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
Please copy and paste these logs in your next reply.

wpeters · March 18, 2014

Ok. Done. these are massive amounts of text. do you want all of that posted?

aharonov · March 18, 2014

Yes, please.

wpeters · March 18, 2014

can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Gary (administrator) on GARY-PC-DESKTOP on 18-03-2014 14:29:44

Running from C:\Users\Gary\Downloads

Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version:

Download link for 64-Bit Version:

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

() C:\Windows\SysWOW64\authServer.exe

(PasswordBox, Inc.) C:\Program Files (x86)\PasswordBox\pbbtnService.exe

(Intuit) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe

(Rosetta Stone Ltd.) C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneDaemon.exe

(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

() C:\Program Files (x86)\lucky leap\updateluckyleap.exe

(CompanionLink Software, Inc.) C:\Program Files\CompanionLink\CompanionLink.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE

() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

() C:\Program Files (x86)\CE\CovenantEyes.exe

(Intuit Inc.) C:\Program Files (x86)\Intuit\QuickBooks 2013\QBW32.EXE

() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

() C:\Program Files (x86)\CE\CovenantEyesHelper.exe

(Dropbox, Inc.) C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe

() C:\Program Files (x86)\lucky leap\bin\utilluckyleap.exe

(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe

() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

() C:\Users\Gary\AppData\Local\Smartbar\Application\Lrcnta.exe

(Planit Solutions, Inc.) C:\Planit\Solid_5_0\Solid.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)

HKLM\...\Run: [CnxtCoInstallerDefer] - C:\Program Files\CONEXANT\PREINSTALL\SETUP4F68632C1\SETUP64.EXE [1574528 2011-02-14] (Conexant Systems, Inc.)

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.)

HKLM-x32\...\Run: [iAStorIcon] - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)

HKLM-x32\...\Run: [startCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-29] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [brMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [NMSVC] - C:\Program Files (x86)\CE\CovenantEyes.exe [2433832 2012-10-22] ()

HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2539544 2014-03-13] ()

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-12] (AVAST Software)

HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\Run: [CompanionLink] - c:\program files\companionlink\companionlink.exe [23935488 2011-07-15] (CompanionLink Software, Inc.)

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\Run: [AS2014] - C:\ProgramData\6XDvn37n\6XDvn37n.exe

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\Run: [browser Infrastructure Helper] - C:\Users\Gary\AppData\Local\Smartbar\Application\QuickShare.exe [26904 2014-03-09] (Smartbar)

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\MountPoints2: E - E:\LaunchU3.exe -a

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\MountPoints2: {3c30a38c-3645-11e2-bed0-d4bed997c2f4} - E:\LaunchU3.exe -a

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\MountPoints2: {4726b8ba-4ed4-11e3-82c1-d4bed997c2f4} - E:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-21-3655513571-3204461518-4247198270-1000\...\MountPoints2: {ec9eb050-d7e9-11e1-badb-d4bed997c2f4} - L:\LaunchU3.exe -a

Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USSMB/1

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCuxhZjwitu2603iO2DKTsRdIV5F5NNlgRS6fpHNrl5-RwYbouV7bEr31vYOXwmnSVDNEU9m5avvl77dsBrFwfoBWa3nR0DtTR1DmqMeBwpE8U2Atsc-yuHBzdn_p2kEsP2r6W071PbM16xGDfuKlN8Pr5-aL5zc,&q={searchTerms}

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCuxhZjwitu2603iO2DKTsRdIV5F5NNlgRS6fpHNrl5-RwYbouV7bEr31vYOXwmnSVDNEU9m5avvl77dsBrFwfoBWa3nR0DtTR1DmqMeBwpE8U2Atsc-yuHBzdn_p2kEsP2r6W071PbM16xGDfuKlN8Pr5-aL5zc,&q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll No File

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll No File

BHO-x32: No Name - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - No File

BHO-x32: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - C:\Program Files (x86)\PasswordBox\Application\pbbtn.dll (PasswordBox, Inc.)

BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: TidyNetwork.com - {7736C7FA-512D-11E2-B871-DEC36088709B} - C:\Users\Gary\AppData\Local\TidyNetwork.com\tidy2ie.dll ()

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File

Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File

Handler: intu-help-qb6 - {6898B29B-BF49-43cb-A0B1-D0B9496AF491} - No File

Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - No File

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll No File

Handler-x32: intu-help-qb6 - {6898B29B-BF49-43cb-A0B1-D0B9496AF491} - C:\Program Files (x86)\Intuit\QuickBooks 2013\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)

Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll No File

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)

Winsock: Catalog5 09 C:\Windows\SysWOW64\nmNsp.dll [1623320] ()

Winsock: Catalog9 01 CESpy.dll File Not found ()

Winsock: Catalog9 02 CESpy.dll File Not found ()

Winsock: Catalog9 03 CESpy.dll File Not found ()

Winsock: Catalog9 04 CESpy.dll File Not found ()

Winsock: Catalog9 05 CESpy.dll File Not found ()

Winsock: Catalog9 06 CESpy.dll File Not found ()

Winsock: Catalog9 07 CESpy.dll File Not found ()

Winsock: Catalog9 08 CESpy.dll File Not found ()

Winsock: Catalog9 09 CESpy.dll File Not found ()

Winsock: Catalog9 10 CESpy.dll File Not found ()

Winsock: Catalog9 21 CESpy.dll File Not found ()

Winsock: Catalog5-x64 09 %SystemRoot%\System32\nmNsp.dll [2203648] ()

Winsock: Catalog9-x64 01 CESpy.dll File Not found ()

Winsock: Catalog9-x64 02 CESpy.dll File Not found ()

Winsock: Catalog9-x64 03 CESpy.dll File Not found ()

Winsock: Catalog9-x64 04 CESpy.dll File Not found ()

Winsock: Catalog9-x64 05 CESpy.dll File Not found ()

Winsock: Catalog9-x64 06 CESpy.dll File Not found ()

Winsock: Catalog9-x64 07 CESpy.dll File Not found ()

Winsock: Catalog9-x64 08 CESpy.dll File Not found ()

Winsock: Catalog9-x64 09 CESpy.dll File Not found ()

Winsock: Catalog9-x64 10 CESpy.dll File Not found ()

Winsock: Catalog9-x64 21 CESpy.dll File Not found ()

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:

=======

CHR Extension: (Google Docs) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-18]

CHR Extension: (Google Drive) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-18]

CHR Extension: (YouTube) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-18]

CHR Extension: (Google Search) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-18]

CHR Extension: (Google Wallet) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-18]

CHR Extension: (Gmail) - C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-18]

CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Gary\AppData\Local\mysearchdial-speeddial.crx [2014-01-26]

CHR HKLM-x32\...\Chrome\Extension: [eiimolhnbbbdagljikeckdkldgemmmlj] - C:\Program Files (x86)\lucky leap\eiimolhnbbbdagljikeckdkldgemmmlj.crx [2014-01-26]

==================== Services (Whitelisted) =================

S2 AcfXAudioService; C:\Windows\SysWOW64\ACFXAU64.dll [436736 2011-02-14] (Conexant Systems, Inc.)

R2 Auth Service; C:\Windows\system32\authServer.exe [2220544 2012-10-22] ()

R2 Auth Service; C:\Windows\SysWOW64\authServer.exe [2219520 2011-11-28] ()

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-12] (AVAST Software)

R2 PasswordBox; C:\Program Files (x86)\PasswordBox\pbbtnService.exe [67584 2013-11-01] (PasswordBox, Inc.)

R2 Update lucky leap; C:\Program Files (x86)\lucky leap\updateluckyleap.exe [348960 2014-03-17] ()

R2 Util lucky leap; C:\Program Files (x86)\lucky leap\bin\utilluckyleap.exe [348960 2014-03-17] ()

R2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-02] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

S3 acfva; C:\Windows\System32\DRIVERS\ACFVA64.sys [122624 2011-02-14] (Conexant Systems Inc.)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-02-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-02-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-12] (AVAST Software)

R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-12] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2014-01-22] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-12] ()

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)

S3 dgcfltr; C:\Windows\System32\DRIVERS\ACFDCP64.sys [34944 2011-02-14] (Conexant Systems, Inc.)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2013-10-01] ()

R2 mdmxsdk; C:\Windows\System32\DRIVERS\ACFSDK64.sys [17024 2011-02-14] (Conexant)

S3 MODEMCSA; C:\Windows\System32\drivers\MODEMCSA.sys [24064 2009-07-13] (Microsoft Corporation)

R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.)

R3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [56872 2007-04-27] (SafeNet, Inc.)

R2 XAudio; C:\Windows\System32\DRIVERS\ACFXAU64.sys [10240 2011-02-14] (Conexant Systems, Inc.)

R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-18 14:29 - 2014-03-18 14:29 - 00017526 _____ () C:\Users\Gary\Downloads\FRST.txt

2014-03-18 14:29 - 2014-03-18 14:29 - 00000000 ____D () C:\FRST

2014-03-18 14:28 - 2014-03-18 14:28 - 02157056 _____ (Farbar) C:\Users\Gary\Downloads\FRST64.exe

2014-03-18 14:27 - 2014-03-18 14:27 - 01145856 _____ (Farbar) C:\Users\Gary\Downloads\FRST.exe

2014-03-18 13:54 - 2014-03-18 13:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Gary\Downloads\mbam-setup-1.75.0.1300 (1).exe

2014-03-18 13:54 - 2014-03-18 13:54 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\Malwarebytes

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-03-18 13:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-03-18 13:50 - 2014-03-18 13:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Gary\Downloads\mbam-setup-1.75.0.1300.exe

2014-03-18 10:33 - 2014-03-18 10:33 - 00000000 ____D () C:\ProgramData\Oracle

2014-03-18 10:32 - 2014-03-18 10:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-03-18 10:32 - 2014-03-18 10:32 - 00000000 ____D () C:\Program Files (x86)\Java

2014-03-18 10:27 - 2014-03-18 10:27 - 00000000 ____D () C:\Users\Gary\AppData\Local\AVG Secure Search

2014-03-17 17:21 - 2014-03-17 17:21 - 00267882 _____ () C:\Users\Gary\Downloads\salem pre-release 20140315 revA.sym

2014-03-12 18:26 - 2014-03-12 18:26 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\LockAP

2014-03-10 09:44 - 2014-03-10 09:44 - 00000000 ____D () C:\Users\Gary\AppData\Local\LPT

2014-03-08 16:00 - 2014-03-08 16:00 - 00000000 ____D () C:\Users\Gary\Desktop\Festool

2014-03-06 11:25 - 2014-03-06 11:32 - 92981859 _____ () C:\Users\Gary\Downloads\11.Tuesday Session 1 John Long.wma

2014-03-02 08:31 - 2014-03-02 08:31 - 00000000 ____D () C:\ProgramData\AVG Secure Search

2014-02-19 15:11 - 2014-02-19 15:11 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\AVAST Software

==================== One Month Modified Files and Folders =======

2014-03-18 14:29 - 2014-03-18 14:29 - 00017526 _____ () C:\Users\Gary\Downloads\FRST.txt

2014-03-18 14:29 - 2014-03-18 14:29 - 00000000 ____D () C:\FRST

2014-03-18 14:29 - 2012-03-15 07:39 - 00286875 _____ () C:\ceProcesses.txt

2014-03-18 14:28 - 2014-03-18 14:28 - 02157056 _____ (Farbar) C:\Users\Gary\Downloads\FRST64.exe

2014-03-18 14:27 - 2014-03-18 14:27 - 01145856 _____ (Farbar) C:\Users\Gary\Downloads\FRST.exe

2014-03-18 14:27 - 2013-10-04 10:27 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-18 14:27 - 2013-10-04 10:27 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-18 14:21 - 2012-03-15 16:49 - 00000000 ____D () C:\Users\Gary\Documents\Outlook Files

2014-03-18 14:19 - 2012-03-16 13:23 - 00000336 _____ () C:\Users\Gary\Peters Cabinetry.QBW.ND

2014-03-18 14:19 - 2012-03-15 14:35 - 54222848 ____R () C:\Users\Gary\Peters Cabinetry.QBW

2014-03-18 14:19 - 2012-03-15 14:35 - 02686976 ____R () C:\Users\Gary\Peters Cabinetry.QBW.TLG

2014-03-18 14:19 - 2012-03-14 17:48 - 00000000 ____D () C:\Users\Gary

2014-03-18 14:08 - 2013-03-12 15:25 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-03-18 13:59 - 2012-06-18 12:06 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\Dropbox

2014-03-18 13:55 - 2014-03-18 13:54 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Gary\Downloads\mbam-setup-1.75.0.1300 (1).exe

2014-03-18 13:54 - 2014-03-18 13:54 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\Malwarebytes

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-03-18 13:54 - 2014-03-18 13:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-03-18 13:53 - 2013-10-01 08:53 - 00000286 _____ () C:\Windows\Tasks\Dealply.job

2014-03-18 13:51 - 2014-03-18 13:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Gary\Downloads\mbam-setup-1.75.0.1300.exe

2014-03-18 12:57 - 2012-03-08 02:23 - 01636774 _____ () C:\Windows\WindowsUpdate.log

2014-03-18 12:01 - 2012-03-14 17:54 - 00000422 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job

2014-03-18 12:00 - 2012-03-17 12:00 - 00003488 _____ () C:\Windows\System32\Tasks\PCDEventLauncher

2014-03-18 12:00 - 2012-03-14 17:54 - 00003460 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest

2014-03-18 11:18 - 2013-03-12 15:47 - 00000174 _____ () C:\Users\Gary\Peters Cabinetry.rid

2014-03-18 10:58 - 2013-10-01 08:53 - 00000000 ____D () C:\Program Files (x86)\DealPlyLive

2014-03-18 10:33 - 2014-03-18 10:33 - 00000000 ____D () C:\ProgramData\Oracle

2014-03-18 10:33 - 2009-07-14 01:13 - 00797870 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-03-18 10:33 - 2009-07-14 00:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-03-18 10:33 - 2009-07-14 00:45 - 00021312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-03-18 10:32 - 2014-03-18 10:32 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-03-18 10:32 - 2014-03-18 10:32 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-03-18 10:32 - 2014-03-18 10:32 - 00000000 ____D () C:\Program Files (x86)\Java

2014-03-18 10:30 - 2013-10-01 08:53 - 00000000 ____D () C:\Program Files (x86)\DealPly

2014-03-18 10:28 - 2012-06-18 13:30 - 00000000 ___RD () C:\Users\Gary\Documents\Dropbox

2014-03-18 10:27 - 2014-03-18 10:27 - 00000000 ____D () C:\Users\Gary\AppData\Local\AVG Secure Search

2014-03-18 10:26 - 2012-03-08 02:53 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks

2014-03-18 10:26 - 2012-03-08 02:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks

2014-03-18 10:26 - 2012-03-08 02:39 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup

2014-03-18 10:25 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-03-18 10:25 - 2009-07-14 00:51 - 00058439 _____ () C:\Windows\setupact.log

2014-03-18 10:17 - 2010-11-20 23:47 - 00217154 _____ () C:\Windows\PFRO.log

2014-03-18 09:35 - 2012-09-25 13:14 - 00000000 ____D () C:\Program Files (x86)\Google

2014-03-18 09:21 - 2012-03-14 18:14 - 00000000 ____D () C:\Users\Gary\AppData\Local\Google

2014-03-18 06:17 - 2013-12-19 07:43 - 00000132 _____ () C:\Users\Gary\AppData\Roaming\WB.CFG

2014-03-17 17:21 - 2014-03-17 17:21 - 00267882 _____ () C:\Users\Gary\Downloads\salem pre-release 20140315 revA.sym

2014-03-17 09:01 - 2012-03-21 13:58 - 00000000 ____D () C:\Users\Gary\QuickBooksAutoDataRecovery

2014-03-13 07:06 - 2013-10-01 08:56 - 00000000 ____D () C:\Users\Gary\AppData\Local\AVG SafeGuard toolbar

2014-03-13 07:06 - 2013-10-01 08:54 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar

2014-03-12 18:26 - 2014-03-12 18:26 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\LockAP

2014-03-10 15:42 - 2013-11-21 07:11 - 00000000 ____D () C:\Program Files (x86)\PasswordBox

2014-03-10 11:37 - 2012-03-14 17:54 - 00000564 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

2014-03-10 09:44 - 2014-03-10 09:44 - 00000000 ____D () C:\Users\Gary\AppData\Local\LPT

2014-03-10 09:44 - 2013-10-01 08:53 - 00000000 ____D () C:\Users\Gary\AppData\Local\Smartbar

2014-03-08 16:00 - 2014-03-08 16:00 - 00000000 ____D () C:\Users\Gary\Desktop\Festool

2014-03-07 18:17 - 2012-09-25 15:13 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-03-06 11:32 - 2014-03-06 11:25 - 92981859 _____ () C:\Users\Gary\Downloads\11.Tuesday Session 1 John Long.wma

2014-03-04 12:22 - 2012-03-14 17:54 - 00004278 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

2014-03-02 08:31 - 2014-03-02 08:31 - 00000000 ____D () C:\ProgramData\AVG Secure Search

2014-03-02 08:30 - 2013-10-01 08:54 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys

2014-02-24 08:08 - 2009-07-14 00:45 - 00434344 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-20 09:29 - 2012-03-14 17:48 - 00118624 _____ () C:\Users\Gary\AppData\Local\GDIPFONTCACHEV1.DAT

2014-02-19 15:11 - 2014-02-19 15:11 - 00000000 ____D () C:\Users\Gary\AppData\Roaming\AVAST Software

2014-02-19 15:04 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-06 11:39

==================== End Of Log ============================

wpeters · March 18, 2014

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014

Ran by Gary at 2014-03-18 14:30:13

Running from C:\Users\Gary\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Able2Extract Professional 7.0 (HKLM-x32\...\{C894CC24-0DEC-4340-BCC9-DD4310DF3BEC}_is1) (Version: 7.0 - Investintech.com Inc.)

Accidental Damage Services Agreement (HKLM-x32\...\{EF85FEF4-EB92-4075-A6D2-5F519BB30A2C}) (Version: 2.0.0 - Dell Inc.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\{98616875-CF30-4BE5-AAED-36EF4AC6EE27}) (Version: 11.3.300.268 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)

Alphacam V75 (HKLM-x32\...\AlphaCAMDeInstKey) (Version: - )

AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden

Any DWG DXF Converter 2013 (HKLM-x32\...\Any DWG DXF Converter_is1) (Version: - AnyDWG Software, Inc.)

ATI AVIVO64 Codecs (Version: 11.6.0.10628 - ATI Technologies Inc.) Hidden

ATI Catalyst Install Manager (HKLM\...\{82AB13D7-BDE1-D24C-B245-1A3F0C29022C}) (Version: 3.0.829.0 - ATI Technologies, Inc.)

avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2013 - Avast Software)

Banctec Service Agreement (HKLM-x32\...\{42D68A86-DB1C-4256-B8C9-5D0D92919AF5}) (Version: 2.0.0 - Dell Inc.)

Brother MFL-Pro Suite MFC-8890DW (HKLM-x32\...\{004B8D14-7E3A-490A-ABB3-753535E169E3}) (Version: 2.0.0.0 - Brother Industries, Ltd.)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden

Catalyst Control Center (x32 Version: 2011.0628.2340.40663 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2011.0628.2340.40663 - ATI Technologies, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2011.0628.2340.40663 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Czech (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Danish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Dutch (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help English (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Finnish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help French (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help German (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Greek (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Italian (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Japanese (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Korean (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Polish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Russian (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Spanish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Swedish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Thai (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

CCC Help Turkish (x32 Version: 2011.0628.2339.40663 - ATI) Hidden

ccc-utility64 (Version: 2011.0628.2340.40663 - ATI) Hidden

Complete Care Business Service Agreement (HKLM-x32\...\{0ECFCB07-9BFE-4970-ACA1-D568D982760B}) (Version: 2.0.0 - Dell Inc.)

Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)

Covenant Eyes (HKLM-x32\...\{5AC5ED2E-2936-4B54-A429-703F9034938E}) (Version: 4.5.3 - Covenant Eyes, Inc.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D7453B4F-9A57-4B46-9878-48F90223F8F7}) (Version: - Microsoft)

Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.61 - Dell Inc.)

Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.61 - Dell Inc.)

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dell Home Systems Service Agreement (HKLM-x32\...\{AB2FDE4F-6BED-4E9E-B676-3DCCEBB1FBFE}) (Version: 2.0.0 - Dell Inc.)

Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.)

Dell Support Center (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden

Designer Appliances (HKCU\...\Designer Appliances) (Version: - )

Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)

DWGSee 2013 (HKLM-x32\...\{6774E158-FB4D-404A-9C5C-785D4D10927C}) (Version: 1.00.2011 - AutoDWG)

e-Sword (HKLM-x32\...\{118071AB-6572-4FAD-A1FD-67264C994350}) (Version: 10.01.0000 - Rick Meyers)

Freemake Video Converter version 3.2.0 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 3.2.0 - Ellora Assets Corporation)

FreeOCR v4.2 (HKLM-x32\...\freeocr_is1) (Version: - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)

Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden

GoToMeeting 5.4.0.1082 (HKCU\...\GoToMeeting) (Version: 5.4.0.1082 - CitrixOnline)

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java 7 Update 1 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417001FF}) (Version: 7.0.10 - Oracle)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Loan Calculator 1.2 (HKLM-x32\...\Loan Calculator_is1) (Version: - LoanCalculator.ws)

lucky leap 1.0.0 (HKLM\...\lucky leap) (Version: 1.0.0 - luckyleap)

Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)

Microsoft Office 2010 Service Pack 1 (SP1) (x32 Version: - Microsoft) Hidden

Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.1.10329.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31007 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.31010 - Microsoft Corporation) Hidden

Mozaik (HKLM-x32\...\Mozaik3.0) (Version: 3.0 - Mozaik Software, Inc)

Mozaik (HKLM-x32\...\Mozaik3.1.2) (Version: 3.1.2 - Mozaik Software, Inc)

Mozaik (HKLM-x32\...\Mozaik3.3.0) (Version: 3.3.0 - Mozaik Software, Inc)

Mozaik (HKLM-x32\...\Mozaik3.4.0) (Version: 3.4.0 - Mozaik Software, Inc)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

Mysearchdial (HKCU\...\mysearchdial) (Version: - Mysearchdial) <==== ATTENTION

Netwaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.59 - BVRP Software, Inc)

Osborne 2009 (HKCU\...\Osborne 2009) (Version: - )

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.0 - Frank Heindörfer, Philip Chinery)

QualxServ Service Agreement (HKLM-x32\...\{903679E8-44C8-4C07-9600-05C92654FC50}) (Version: 2.0.0 - Dell Inc.)

QuickBooks (x32 Version: 23.0.4008.2305 - Intuit Inc.) Hidden

QuickBooks Pro 2013 (HKLM-x32\...\{3C631966-387E-4054-85D9-BBFFABE32BD8}) (Version: 23.0.4005.2305 - Intuit Inc.)

QuickShare (HKLM-x32\...\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}) (Version: 11.24.60.15709 - Linkury Inc.) <==== ATTENTION

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6141 - Realtek Semiconductor Corp.)

Rosetta Stone Ltd Services (HKLM-x32\...\{FFF186B6-4D02-4D8D-A776-C43E062E01A9}) (Version: 3.2.18 - Rosetta Stone Ltd.)

S2M Center 2.2 (HKLM-x32\...\InstallShield_{3D025DB6-C0E5-4889-B573-E8C875A9F582}) (Version: 2.2.2.214 - Planit Solutions)

S2M Center 2.2 (x32 Version: 2.02.0000 - Planit Solutions) Hidden

ScreenShot V1.1.0.0 (HKLM-x32\...\{1BBEB0C2-B5F6-4B8E-A4EA-1B13C45FCE7D}) (Version: 1.1.0 - MichaelFontana)

Sentinel System Driver Installer 7.4.0 (HKLM-x32\...\{62B74257-2E1B-48FB-843C-0FBA43FE1327}) (Version: 7.4.0 - SafeNet, Inc.)

SetupAPC1033English (HKLM-x32\...\{0F4E0339-21CA-4776-B115-FCC643022254}) (Version: 1.0.0 - Alphacam)

SetupAPCCore (HKLM-x32\...\{7A19CF50-5CEB-4575-9568-BF85C96FB791}) (Version: 1.0.0 - Alphacam)

SetupATL (HKLM-x32\...\{FE605C70-78B0-45B1-AD70-DF205DE654AB}) (Version: 1.0.0 - Default Company Name)

SetupMFC (HKLM-x32\...\{546DACD8-9A8F-40C8-836C-868628501027}) (Version: 1.0.0 - Default Company Name)

SketchUp 8 (HKLM-x32\...\{779D8CA1-03DD-4AD4-B21F-3E20BFE7BEDE}) (Version: 3.0.15158 - Trimble Navigation Limited)

Solid 5.0 (HKLM-x32\...\InstallShield_{E37E351B-8976-4A51-9A95-6B19EF566C20}) (Version: 5.0.2.220 - Planit Solutions)

Solid 5.0 (x32 Version: 5.00.0000 - Planit Solutions) Hidden

SolidWorks eDrawings 2012 (HKLM-x32\...\{F6FB7A4E-3306-4E06-8B29-CA8EB19BC90B}) (Version: 12.4.108 - Dassault Systèmes SolidWorks Corp.)

TidyNetwork.com (HKCU\...\TidyNetwork.com) (Version: - TidyNetwork.com)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version: - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553065) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{17E7B9AB-2DD2-457D-8D8E-CD14ACA973FE}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{15058154-469F-4794-ACD5-94F8420F9B80}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{995A7832-B512-46D5-87C9-2D71FB541435}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{73E67A3A-8D61-44EF-90C2-1697C3DBE668}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2566458) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{4D98EEEA-A31B-42FA-991A-F989594F4DA5}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4D98EEEA-A31B-42FA-991A-F989594F4DA5}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9CFD026D-EB1C-48C2-9DD2-8E8875F251B2}) (Version: - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM-x32\...\{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{9865DC3A-2898-48D9-B96A-46397571C934}) (Version: - Microsoft)

Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{5EBDE1DE-3B28-4134-AB00-85CFF2B4F94D}) (Version: - Microsoft)

Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38990592-F6A1-4A26-96C7-0600E36AE794}) (Version: - Microsoft)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{1EEFF749-6F29-4F0B-AB08-4C6EA52AA110}) (Version: - Microsoft)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version: - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft)

USB Modem (HKLM\...\CNXT_MODEM_USB_ACF) (Version: 2.0.22.0 - Conexant)

Visual Basic for Applications ® Core - English (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden

Visual Basic for Applications ® Core (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points =========================

12-02-2014 22:03:21 avast! antivirus system restore point

18-03-2014 14:31:24 Installed Java 7 Update 51

==================== Hosts content: ==========================

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B94B8ED-FEF6-461D-800F-2B47C784791A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12] (Adobe Systems Incorporated)

Task: {2419734F-8D49-48BB-9BDF-6F72A6C00063} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-12] (AVAST Software)

Task: {436B5637-8170-4A1E-8D85-52DA9C9D0C76} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {4DF5EDCD-CAA9-4292-A6CC-72E227DEFBB3} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\pcdrcui.exe [2011-03-22] (PC-Doctor, Inc.)

Task: {54123F93-AC1D-4A87-949C-3010158160DA} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [2011-03-22] (PC-Doctor, Inc.)

Task: {9E115A23-0D8E-4177-BB9D-221D174CE48C} - System32\Tasks\TidyNetwork Update => C:\Users\Gary\AppData\Local\TidyNetwork.com\tidy2update.exe

Task: {C84879FE-542D-44FB-AD3E-AF2742CD7FA1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)

Task: {CBE7C860-8F06-4B70-BF03-9FB3EE483CAF} - System32\Tasks\PCDEventLauncher => C:\Program Files\Dell Support Center\sessionchecker.exe [2011-03-22] (PC-Doctor, Inc.)

Task: {E32E14ED-A2CC-43D4-8F5A-01F9251B88D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-04] (Google Inc.)

Task: {EE2458C7-ADB1-4730-8469-EEF0A8C661AA} - System32\Tasks\Dealply => C:\Users\Gary\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-10-01] () <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Dealply.job => C:\Users\Gary\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exe

Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\pcdrcui.exe

==================== Loaded Modules (whitelisted) =============

2013-02-07 08:27 - 2012-10-22 17:01 - 00206336 _____ () C:\Windows\system32\CESpy.dll

2013-02-07 08:27 - 2012-10-22 17:01 - 02203648 _____ () C:\Windows\System32\nmNsp.dll

2013-02-07 08:27 - 2012-10-22 17:01 - 00206336 _____ () C:\Windows\System32\CESpy.dll

2012-03-15 07:39 - 2011-11-28 14:33 - 02219520 ____N () C:\Windows\SysWOW64\authServer.exe

2012-03-14 21:10 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll

2013-09-28 00:34 - 2014-03-17 20:51 - 00348960 _____ () C:\Program Files (x86)\lucky leap\updateluckyleap.exe

2012-03-08 02:39 - 2011-09-22 12:14 - 02751808 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE

2013-02-07 08:27 - 2012-10-22 17:02 - 02433832 _____ () C:\Program Files (x86)\CE\CovenantEyes.exe

2013-10-01 08:54 - 2014-03-13 07:05 - 02539544 _____ () C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe

2013-02-07 08:27 - 2012-10-22 17:02 - 01533240 _____ () C:\Program Files (x86)\CE\CovenantEyesHelper.exe

2013-10-03 07:06 - 2014-03-17 20:20 - 00348960 _____ () C:\Program Files (x86)\lucky leap\bin\utilluckyleap.exe

2014-03-02 08:31 - 2014-03-02 08:30 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe

2011-06-29 01:38 - 2011-06-29 01:38 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2011-03-14 16:21 - 2011-03-14 16:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2012-03-15 07:39 - 2012-10-22 17:00 - 00577024 _____ () C:\Program Files\CE\nmsvc64.dll

2012-03-15 07:39 - 2012-10-22 17:00 - 00079872 _____ () C:\Program Files\CE\nmsvTree64.dll

2012-03-15 07:39 - 2012-10-22 17:00 - 00130048 _____ () C:\Program Files\CE\zlib64.dll

2014-03-09 18:42 - 2014-03-09 18:42 - 00021784 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\Lrcnta.exe

2014-03-18 10:18 - 2014-03-18 07:03 - 02188800 _____ () C:\Program Files\AVAST Software\Avast\defs\14031801\algo.dll

2013-02-07 08:27 - 2012-10-22 17:02 - 01623320 _____ () C:\Windows\SysWOW64\nmNsp.dll

2013-11-01 16:11 - 2013-11-01 16:11 - 00090624 _____ () C:\Program Files (x86)\PasswordBox\libwebsocketswin32.dll

2013-02-07 08:27 - 2012-10-22 17:02 - 02021144 _____ () C:\Program Files (x86)\CE\nmsvc.dll

2013-02-07 08:27 - 2012-10-22 17:02 - 00072992 _____ () C:\Program Files (x86)\CE\nmsvTree.dll

2013-02-07 08:27 - 2012-10-22 16:47 - 00112128 _____ () C:\Program Files (x86)\CE\zlib.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00269128 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\boost_regex-vc90-mt-p-1_33.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00021832 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\QBCompressor.dll

2012-12-22 23:53 - 2012-12-22 23:53 - 00059904 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\zlib1.dll

2013-06-19 15:45 - 2013-06-19 15:45 - 00141640 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\QBMAPILibrary.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00176968 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\boost_serialization-vc90-mt-p-1_33.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00415560 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\FtuEngine.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00529224 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\BackupLib.dll

2013-06-19 12:45 - 2013-06-19 12:45 - 00128328 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\QBProActiveCore.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00559944 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\FeaturesBridge.dll

2013-06-19 15:44 - 2013-06-19 15:44 - 00042824 _____ () C:\Program Files (x86)\Intuit\QuickBooks 2013\mbpopup.dll

2014-03-02 08:31 - 2014-03-02 08:30 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll

2014-02-12 18:16 - 2014-02-12 18:16 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-10-18 19:55 - 2013-10-18 19:55 - 25100288 _____ () C:\Users\Gary\AppData\Roaming\Dropbox\bin\libcef.dll

2013-11-15 19:33 - 2013-11-15 19:33 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1beb84c27c2edeb38839916524b9df4d\IsdiInterop.ni.dll

2012-03-08 02:36 - 2011-05-20 12:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll

2014-03-09 18:42 - 2014-03-09 18:42 - 00029464 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\lrcnt.dll

2014-03-09 18:43 - 2014-03-09 18:43 - 00060184 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\sppsm.dll

2014-03-09 18:43 - 2014-03-09 18:43 - 00026392 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll

2014-03-09 18:43 - 2014-03-09 18:43 - 00055576 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\srut.dll

2014-03-09 18:42 - 2014-03-09 18:42 - 00164632 _____ () C:\Users\Gary\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll

2014-03-18 09:36 - 2014-03-14 20:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

==================== Disabled items from MSCONFIG ==============

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (03/18/2014 10:27:37 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 10:21:45 AM) (Source: Application Error) (User: )

Description: Faulting application name: IntuitSyncManager.exe, version: 6.3.24.4023, time stamp: 0x52ecbd76

Faulting module name: dblib11.dll, version: 11.0.1.2584, time stamp: 0x4d967692

Exception code: 0xc0000005

Fault offset: 0x000bb8cd

Faulting process id: 0xd08

Faulting application start time: 0xIntuitSyncManager.exe0

Faulting application path: IntuitSyncManager.exe1

Faulting module path: IntuitSyncManager.exe2

Report Id: IntuitSyncManager.exe3

Error: (03/18/2014 10:19:06 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 09:22:29 AM) (Source: Application Hang) (User: )

Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 8430

Start Time: 01cf42acf6cac188

Termination Time: 0

Application Path: C:\Program Files\Internet Explorer\iexplore.exe

Report Id:

Error: (03/17/2014 08:16:13 AM) (Source: QuickBooks) (User: )