Spyware - Foxydeal - unable to remove

andy_d · November 10, 2014

Hey guys. I'm having some issues trying to remove Foxydeal. Attached is an image of the top left of Chrome. That icon turns into a long bar pointing out coupons that I could potentially used.

I see no reference to Foxydeal anywhere on my PC. I tried a bunch of different scanning tools and so far nothing picks it up. I tried resetting Chrome and still it shows up. I guess it could be another extension but I can't imagine which it would be.

Below are the scans from Farbar

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-11-2014 01

Ran by Andy (administrator) on MAIN on 09-11-2014 23:26:30

Running from D:\Temp

Loaded Profile: Andy (Available profiles: Andy)

Platform: Windows 8.1 Pro (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe

(DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe

() C:\Program Files\Everything\Everything.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe

(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(MMSOFT Design Ltd.) C:\Program Files\Pulseway\PCMonitorSrv.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(MMSOFT Design Ltd.) C:\Program Files\Pulseway\pcmontask.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(Silicondust USA Inc) C:\Program Files\Silicondust\HDHomeRun\hdhomerun_service.exe

() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe

(Microsoft Corporation) C:\Windows\System32\Essentials\WseClientMonitorSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Corporation) C:\Windows\System32\Essentials\ProviderRegistryService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\cmd.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(LastPass) C:\Program Files (x86)\LastPass\nplastpass.exe

(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Microsoft Corporation) C:\Windows\System32\Essentials\EssentialsTrayApp.exe

() C:\Program Files\Everything\Everything.exe

(Greenshot) C:\Program Files\Greenshot\Greenshot.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe

(BitTorrent, Inc.) C:\Program Files\BitTorrent Sync\BTSync.exe

(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXSTM.exe

(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe

(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe

(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientGui.exe

(Herman van Eijk) C:\Program Files (x86)\MCE Standby Tool\mst.exe

(Dropbox, Inc.) C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Orbiscom Ltd.) C:\Windows\SysWOW64\OBroker.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

() C:\Program Files\Common Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus Updater\11.4.6792.0\AdAwareUpdater.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe

(Microsoft Corporation) C:\Windows\System32\Essentials\SharedServiceHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [6590672 2014-10-17] (SoftPerfect Research)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2014-05-14] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-14] (Logitech Inc.)

HKLM\...\Run: [EssentialsTrayApp] => C:\Windows\System32\Essentials\EssentialsTrayApp.exe [302592 2013-08-22] (Microsoft Corporation)

HKLM\...\Run: [Everything] => C:\Program Files\Everything\Everything.exe [1441792 2014-08-05] ()

HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [8925504 2014-10-15] ()

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-02-29] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-02-29] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)

HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)

HKLM-x32\...\Run: [MCE Standby Tool] => C:\Program Files (x86)\MCE Standby Tool\mst.exe [1451008 2011-01-30] (Herman van Eijk)

HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-08-11] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795672 2014-07-01] (CyberLink Corp.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112856 2014-10-29] (VMware, Inc.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Run: [GoogleChromeAutoLaunch_D9C6B67A63EF2C294D4A204374B6A795] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [915784 2014-11-04] (Google Inc.)

HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Run: [bitTorrent Sync] => C:\Program Files\BitTorrent Sync\BTSync.exe [5019488 2014-10-18] (BitTorrent, Inc.)

HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-29] (Piriform Ltd)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk

ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk

ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Lights-Out Client.lnk

ShortcutTarget: Lights-Out Client.lnk -> C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientGui.exe (AxoNet Software GmbH)

Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Epson all-in-one Registration.lnk

ShortcutTarget: Epson all-in-one Registration.lnk -> C:\Users\Andy\AppData\Roaming\Leadertech\PowerRegister\Epson all-in-one Registration.exe (Leader Technologies/Epson)

Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk

ShortcutTarget: EvernoteTray.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Startup: C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll (Hermann Schinagl)

ShellIconOverlayIdentifiers: [iconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll (Hermann Schinagl)

ShellIconOverlayIdentifiers: [iconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll (Hermann Schinagl)

ShellIconOverlayIdentifiers-x32: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\32\HardlinkShellExt.dll (Hermann Schinagl)

ShellIconOverlayIdentifiers-x32: [iconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\32\HardlinkShellExt.dll (Hermann Schinagl)

ShellIconOverlayIdentifiers-x32: [iconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\32\HardlinkShellExt.dll (Hermann Schinagl)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9EB6A64921F9CF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

SearchScopes: HKLM-x32 - DefaultScope value is missing.

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)

DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com/bin/srldetect_intel_4.5.24.0.cab

Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File

Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)

Tcpip\..\Interfaces\{52474A2A-612B-4591-836F-691F225F8F19}: [NameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default

FF DefaultSearchEngine: Google CSearch

FF Homepage: hxxp://verizon.my.yahoo.com/

FF Keyword.URL: hxxp://www.google.com/cse?cx=003532357541664755234:ogmjfysvuii&ie=UTF-8&q=

FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)

FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll (Citrix Systems, Inc.)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF SearchPlugin: C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\searchplugins\google..xml

FF SearchPlugin: C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\searchplugins\imdb.xml

FF SearchPlugin: C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\searchplugins\youtube-video-search.xml

FF Extension: LastPass - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\support@lastpass.com [2014-09-01]

FF Extension: AutoCopy 2 - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\autocopy2@teo.pl.xpi [2014-05-25]

FF Extension: CheckPlaces - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\checkplaces@andyhalford.com.xpi [2014-05-25]

FF Extension: Ghostery - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\firefox@ghostery.com.xpi [2014-05-25]

FF Extension: Movable Firefox Button - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\movableAppButton@Merci.chao.xpi [2014-05-25]

FF Extension: NoSquint - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\nosquint@urandom.ca.xpi [2014-05-25]

FF Extension: Readability - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\readability@readability.com.xpi [2014-05-25]

FF Extension: ScrapBook - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi [2014-05-25]

FF Extension: DownThemAll! - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-07-06]

FF Extension: Greasemonkey - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-05-25]

FF Extension: Copy All Links - C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\rwboa5pg.default\Extensions\{e6a9a96e-4a08-4719-b9bd-0e91c35aaabc}.xpi [2014-07-06]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-06-01]

FF HKLM-x32\...\Firefox\Extensions: [citius@orbiscom] - C:\Program Files (x86)\Virtual Account Numbers

FF Extension: Virtual Account Numbers for Firefox - C:\Program Files (x86)\Virtual Account Numbers [2014-08-17]

FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-09-06]

Chrome:

=======

CHR HomePage: Default -> hxxp://verizon.my.yahoo.com/

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll No File

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\pdf.dll ()

CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File

CHR Plugin: (Citrix ICA Client) - C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll (Citrix Systems, Inc.)

CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Java Platform SE 7 U55) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (NPLastPass) - C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll No File

CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

CHR Plugin: (Nitro PDF plugin for Firefox and Chrome) - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File

CHR Profile: C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Magic Actions for YouTube™) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-05-25]

CHR Extension: (Google Docs) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-25]

CHR Extension: (Google Drive) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-25]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-25]

CHR Extension: (Earth View from Google Maps) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhloflhklmhfpedakmangadcdofhnnoh [2014-10-24]

CHR Extension: (Auto Copy) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bijpdibkloghppkbmhcklkogpjaenfkg [2014-05-25]

CHR Extension: (YouTube) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-25]

CHR Extension: (Google Cast) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-05-25]

CHR Extension: (Adblock Plus) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-05-25]

CHR Extension: (Pushbullet) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2014-05-25]

CHR Extension: (OneTab) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2014-05-25]

CHR Extension: (Google Search) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-25]

CHR Extension: (Subscriptions Grid For YouTube™) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnjhgnfnmijfkmcddcmffeamphmmeed [2014-09-01]

CHR Extension: (Gmelius for Gmail) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dheionainndbbpoacpnopgmnihkcmnkl [2014-08-15]

CHR Extension: (Copy All Urls) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\djdmadneanknadilpjiknlnanaolmbfk [2014-07-06]

CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2014-06-01]

CHR Extension: (GGReader) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eclfpdflffnadciiehipiknmahlokchp [2014-05-25]

CHR Extension: (Google Calendar) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-05-25]

CHR Extension: (Google Play Music) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-05-25]

CHR Extension: (Pandora) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl [2014-05-25]

CHR Extension: (Downloadr - Download Manager) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjihnjejboipjmadkpmknccijhibnpfe [2014-07-20]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-05-25]

CHR Extension: (feedly) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2014-05-25]

CHR Extension: (Disconnect) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-05-25]

CHR Extension: (Pocket Website) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap [2014-05-25]

CHR Extension: (middle click mini) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnpgomjchhllpeehnmjfcfoceboliing [2014-11-01]

CHR Extension: (Any.do Extension) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdadialhpiikehpdeejjeiikopddkjem [2014-05-25]

CHR Extension: (Hangouts) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2014-10-10]

CHR Extension: (Google Play) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2014-05-25]

CHR Extension: (FVD Downloader) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-10-11]

CHR Extension: (Linkclump) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2014-07-06]

CHR Extension: (Numerics Calculator & Converter) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2014-05-25]

CHR Extension: (Bitdefender Antivirus Quickscan Extension) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafigccabbdlgnefggicikalmelgenje [2014-11-09]

CHR Extension: (Google Dictionary (by Google)) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2014-05-25]

CHR Extension: (Pocket) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2014-11-09]

CHR Extension: (Save to Pocket) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-11-09]

CHR Extension: (Google Wallet) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-25]

CHR Extension: (Currently) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhmphdkpgbibohbnpbfiefkgieacjmh [2014-05-25]

CHR Extension: (Type Fu (hosted)) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\okboeogmnhjpgbeaokfogelclpblaemo [2014-05-25]

CHR Extension: (FIDO U2F (Universal 2nd Factor) extension) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfboblefjcgdjicmnffhdgionmgcdmne [2014-10-24]

CHR Extension: (Gmail) - C:\Users\Andy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2013-09-17] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2013-09-17] (ASUSTeK Computer Inc.)

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)

S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-07-16] (Microsoft Corporation)

R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [210024 2011-05-31] (DTS)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)

R2 Everything; C:\Program Files\Everything\Everything.exe [1441792 2014-08-05] () [File not signed]

S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [File not signed]

R2 HDHomeRun Service; C:\Program Files\Silicondust\HDHomeRun\hdhomerun_service.exe [27184 2014-10-25] (Silicondust USA Inc)

R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22768 2014-04-17] (Microsoft Corporation)

R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation)

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [707888 2014-10-15] ()

S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)

R2 LoClntService; C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe [22152 2013-12-19] (AxoNet Software GmbH)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)

S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]

R2 PC Monitor; C:\Program Files\Pulseway\PCMonitorSrv.exe [820696 2014-11-06] (MMSOFT Design Ltd.)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254552 2012-08-08] ()

R3 ServiceProviderRegistry; C:\Windows\System32\Essentials\ProviderRegistryService.exe [34816 2013-08-22] (Microsoft Corporation)

S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation)

S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation)

S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]

R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14407384 2014-10-29] ()

S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87736 2014-04-30] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation)

S3 WseClientMgmtSvc; C:\Windows\System32\Essentials\SharedServiceHost.exe [24576 2013-08-22] (Microsoft Corporation)

R3 WseClientMonitorSvc; C:\Windows\System32\Essentials\WseClientMonitorSvc.exe [39936 2013-08-22] (Microsoft Corporation)

R3 WseHealthSvc; C:\Windows\System32\Essentials\SharedServiceHost.exe [24576 2013-08-22] (Microsoft Corporation)

S3 WseNtfSvc; C:\Windows\System32\Essentials\SharedServiceHost.exe [24576 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-22] (Advanced Micro Devices, Inc.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2013-01-15] ()

R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)

R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c64x64.sys [468752 2014-05-02] (Intel Corporation)

R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-09] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)

R1 networx; C:\Windows\System32\drivers\networx.sys [60408 2014-10-17] (NetFilterSDK.com)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)

R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)

S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-10-23] ()

U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [33512 2014-09-20] ()

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.)

R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation)

S3 clwvd6; \SystemRoot\system32\DRIVERS\clwvd6.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 23:24 - 2014-11-09 23:24 - 00002333 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-11-09 23:24 - 2014-11-09 23:24 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\LavasoftStatistics

2014-11-09 23:24 - 2014-11-09 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft

2014-11-09 23:24 - 2014-11-09 23:24 - 00000000 ____D () C:\Program Files\Lavasoft

2014-11-09 23:24 - 2014-11-09 23:24 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-11-09 23:23 - 2014-11-09 23:23 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-11-09 23:17 - 2014-11-09 23:19 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-11-09 23:02 - 2014-11-09 23:02 - 00001099 _____ () C:\Users\Public\Desktop\SpywareBlaster.lnk

2014-11-09 23:02 - 2014-11-09 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster

2014-11-09 23:02 - 2014-11-09 23:02 - 00000000 ____D () C:\ProgramData\Licenses

2014-11-09 23:02 - 2014-11-09 23:02 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster

2014-11-09 23:02 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL

2014-11-09 19:49 - 2014-11-09 19:49 - 00000574 _____ () C:\Windows\PFRO.log

2014-11-09 19:33 - 2014-11-09 19:33 - 00000000 ____D () C:\Users\Andy\.appwork

2014-11-09 19:08 - 2014-11-09 19:08 - 00000000 ____D () C:\Program Files (x86)\Anvisoft

2014-11-09 15:56 - 2014-11-09 23:26 - 00000000 ____D () C:\FRST

2014-11-08 22:53 - 2014-11-08 22:53 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin

2014-11-08 22:53 - 2014-11-08 22:53 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Should I Remove It

2014-11-08 22:53 - 2014-11-08 22:53 - 00000000 ____D () C:\Program Files (x86)\Reason

2014-11-07 08:40 - 2014-11-09 19:30 - 00000000 ____D () C:\Users\Andy\AppData\Local\Newsbin

2014-11-07 08:36 - 2014-11-07 08:39 - 00000000 ____D () C:\Users\Andy\.HelloNzb

2014-11-07 08:22 - 2014-11-07 08:44 - 00000000 ____D () C:\Program Files (x86)\SABnzbd

2014-11-05 23:38 - 2014-11-05 23:38 - 00000000 ____D () C:\Program Files\ASUS

2014-11-05 23:38 - 2011-09-20 12:25 - 00046152 _____ (MCCI Corporation) C:\Windows\SysWOW64\Drivers\ASUSFILTER.sys

2014-11-05 23:37 - 2014-11-05 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2014-11-05 23:37 - 2014-11-05 23:37 - 00000000 _____ () C:\Windows\SysWOW64\Drivers\1043_ASUSTeK_P8Z68 DELUXE.alu

2014-11-05 23:37 - 2013-01-15 10:52 - 00014464 _____ () C:\Windows\SysWOW64\Drivers\AsUpIO.sys

2014-11-05 23:37 - 2008-12-02 20:05 - 00184320 _____ (ASUSTeK) C:\Windows\SysWOW64\Drivers\UpdateHelper.dll

2014-11-05 23:36 - 2014-11-05 23:38 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS

2014-11-05 23:36 - 2014-11-05 23:36 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\MFDLL

2014-11-05 23:36 - 2014-11-05 23:36 - 00000000 ____D () C:\ProgramData\ASUS

2014-11-05 23:36 - 2014-11-05 23:36 - 00000000 ____D () C:\Program Files (x86)\ASUS

2014-11-05 23:36 - 2012-08-22 17:54 - 00015232 _____ () C:\Windows\SysWOW64\Drivers\AsIO.sys

2014-11-05 23:36 - 2010-06-29 15:41 - 00028672 _____ (ASUSTek Computer Inc.) C:\Windows\SysWOW64\AsIO.dll

2014-11-05 23:36 - 2008-01-04 13:34 - 00011832 ____N () C:\Windows\SysWOW64\Drivers\AsInsHelp64.sys

2014-11-05 23:36 - 2008-01-04 13:34 - 00010216 ____N () C:\Windows\SysWOW64\Drivers\AsInsHelp32.sys

2014-11-05 07:24 - 2014-10-29 15:01 - 00064728 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys

2014-11-05 07:24 - 2013-10-08 18:21 - 00073296 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys

2014-11-05 07:24 - 2013-10-08 18:21 - 00067664 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll

2014-11-05 07:24 - 2013-10-08 18:21 - 00063568 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll

2014-11-05 07:23 - 2014-11-05 07:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware

2014-11-05 07:23 - 2014-11-05 07:23 - 00000000 ____D () C:\Program Files\Common Files\VMware

2014-11-05 07:23 - 2014-10-29 15:01 - 00931032 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll

2014-11-05 07:23 - 2014-10-29 15:01 - 00437976 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

2014-11-05 07:23 - 2014-10-29 15:01 - 00359128 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

2014-11-05 07:23 - 2014-10-29 15:01 - 00031448 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys

2014-11-05 07:23 - 2014-02-27 18:40 - 00054464 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys

2014-11-04 07:23 - 2014-11-04 07:23 - 00000059 _____ () C:\Users\Andy\Desktop\Serial.txt

2014-11-02 18:11 - 2014-11-02 18:11 - 00000000 ____D () C:\Users\Andy\AppData\Local\Geckofx

2014-11-02 18:10 - 2014-11-02 18:10 - 00002176 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Vocabulary 2014.lnk

2014-11-02 18:10 - 2014-11-02 18:10 - 00002164 _____ () C:\Users\Public\Desktop\Ultimate Vocabulary 2014.lnk

2014-11-02 18:10 - 2014-11-02 18:10 - 00000128 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

2014-11-02 18:10 - 2014-11-02 18:10 - 00000000 ____D () C:\ProgramData\Ultimate Vocabulary

2014-11-02 18:10 - 2014-11-02 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Vocabulary 2014

2014-11-02 18:10 - 2014-11-02 18:10 - 00000000 ____D () C:\Program Files (x86)\eReflect

2014-11-02 18:09 - 2014-11-02 18:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services

2014-11-02 18:07 - 2014-11-02 18:07 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\eReflect

2014-11-02 08:55 - 2014-11-02 08:55 - 00001993 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk

2014-11-02 08:55 - 2014-06-16 01:01 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-11-02 08:55 - 2014-06-16 01:01 - 00110336 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-11-01 17:20 - 2014-11-01 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkipSoft Android ToolKit

2014-11-01 17:07 - 2014-11-01 17:07 - 00000000 ____D () C:\Windows\LastGood.Tmp

2014-11-01 17:06 - 2010-08-26 23:32 - 00069120 _____ (Nokia) C:\Windows\system32\nmwcdclsx64.dll

2014-11-01 17:05 - 2014-11-01 17:05 - 00003194 _____ () C:\Windows\System32\Tasks\{2111E3C2-BBCF-4FDB-9033-AC2AC1E1E39E}

2014-10-29 19:01 - 2014-10-29 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2014-10-29 19:01 - 2014-10-29 19:01 - 00000000 ____D () C:\ProgramData\Apple Computer

2014-10-29 19:01 - 2014-10-29 19:01 - 00000000 ____D () C:\Program Files (x86)\QuickTime

2014-10-29 15:00 - 2014-10-29 15:00 - 00080464 _____ (VMware, Inc.) C:\Windows\system32\vmnetbridge.dll

2014-10-29 15:00 - 2014-10-29 15:00 - 00049232 _____ (VMware, Inc.) C:\Windows\system32\vnetinst.dll

2014-10-29 15:00 - 2014-10-29 15:00 - 00046160 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetbridge.sys

2014-10-29 15:00 - 2014-10-29 15:00 - 00024656 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnet.sys

2014-10-29 15:00 - 2014-10-29 15:00 - 00020560 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetadapter.sys

2014-10-26 23:52 - 2014-11-02 08:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung

2014-10-26 23:12 - 2014-11-02 08:51 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Samsung

2014-10-26 23:12 - 2014-05-07 16:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll

2014-10-26 23:11 - 2014-11-02 08:55 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-10-26 14:23 - 2014-09-10 01:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-10-26 14:23 - 2014-09-07 22:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-10-26 14:23 - 2014-09-07 22:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-10-26 14:23 - 2014-09-07 17:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-10-26 14:23 - 2014-09-04 17:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-10-26 14:23 - 2014-09-04 17:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-10-26 14:23 - 2014-09-03 22:15 - 00561416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-10-26 14:23 - 2014-09-03 22:14 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-10-26 14:23 - 2014-09-03 22:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-10-26 14:23 - 2014-09-03 21:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-10-26 14:23 - 2014-09-03 20:19 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-10-26 14:23 - 2014-09-03 20:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2014-10-26 14:23 - 2014-09-03 19:45 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-10-26 14:23 - 2014-09-03 19:41 - 01420288 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-10-26 14:23 - 2014-09-03 19:36 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-10-26 14:23 - 2014-09-03 19:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll

2014-10-26 14:23 - 2014-09-03 19:15 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-10-26 14:23 - 2014-08-30 19:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-10-26 14:23 - 2014-08-30 19:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-10-26 14:23 - 2014-08-30 17:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-10-26 14:23 - 2014-08-30 17:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-10-26 14:23 - 2014-08-30 16:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-10-26 14:23 - 2014-08-30 16:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-10-26 14:23 - 2014-08-30 15:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-10-26 14:23 - 2014-08-30 15:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-10-26 14:23 - 2014-08-27 21:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-10-26 14:23 - 2014-08-27 19:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-10-26 14:23 - 2014-08-27 19:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-10-26 14:23 - 2014-08-23 00:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-10-26 14:23 - 2014-08-23 00:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-10-26 14:23 - 2014-08-22 23:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-10-26 14:23 - 2014-08-01 19:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2014-10-26 14:23 - 2014-08-01 19:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll

2014-10-26 14:18 - 2014-10-26 14:18 - 00000000 ____D () C:\Program Files\AxoNet Software GmbH

2014-10-26 14:14 - 2014-10-26 14:14 - 00000000 ____D () C:\Windows\system32\Essentials

2014-10-26 07:43 - 2014-10-26 07:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDHomeRun

2014-10-26 07:41 - 2014-10-26 07:41 - 00000000 ____D () C:\Users\Andy\AppData\Local\hdhomerun_view

2014-10-26 07:41 - 2014-10-26 07:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDHomeRun VIEW

2014-10-23 22:15 - 2014-10-23 22:15 - 00002466 _____ () C:\Users\Andy\Uninstall-VzInHomeAgentlog.log

2014-10-23 17:09 - 2014-10-23 17:09 - 00003841 _____ () C:\Windows\system32\WmiConf.txt

2014-10-23 17:09 - 2014-10-23 17:09 - 00000306 _____ () C:\Windows\system32\StaticIP.txt

2014-10-23 17:09 - 2014-10-23 17:09 - 00000211 _____ () C:\Windows\system32\WINS.txt

2014-10-23 17:09 - 2014-05-02 11:35 - 00468752 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c64x64.sys

2014-10-23 17:07 - 2014-10-23 22:14 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys

2014-10-23 17:07 - 2014-10-23 17:07 - 00000000 ____D () C:\Users\Andy\AppData\Local\SlimWare Utilities Inc

2014-10-23 17:04 - 2014-07-18 01:31 - 00874712 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys

2014-10-23 17:04 - 2014-07-18 01:31 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-10-23 15:55 - 2014-10-23 15:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSDlife

2014-10-23 15:55 - 2014-10-23 15:55 - 00000000 ____D () C:\ProgramData\Binarysense

2014-10-23 15:55 - 2014-10-23 15:55 - 00000000 ____D () C:\Program Files (x86)\BinarySense

2014-10-22 06:15 - 2014-11-09 07:15 - 00000000 ____D () C:\ProgramData\LightsOut

2014-10-21 21:47 - 2014-10-21 21:47 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\13947

2014-10-21 21:38 - 2014-10-21 21:38 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\DVDFab9

2014-10-21 21:38 - 2014-10-21 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9

2014-10-20 22:37 - 2014-10-20 22:37 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClockworkMod

2014-10-20 22:37 - 2014-10-20 22:37 - 00000000 ____D () C:\Program Files (x86)\ClockworkMod

2014-10-19 18:06 - 2014-10-23 22:15 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Verizon

2014-10-19 18:06 - 2014-10-23 22:15 - 00000000 ____D () C:\Program Files (x86)\Verizon

2014-10-19 18:05 - 2014-10-19 18:06 - 00001759 _____ () C:\Users\Andy\Install-VzInHomeAgentLog.log

2014-10-19 11:02 - 2014-10-19 11:02 - 00002338 _____ () C:\Users\Andy\Desktop\HTPC.rdp

2014-10-18 17:34 - 2014-11-09 19:47 - 00000000 ____D () C:\ProgramData\VSO

2014-10-18 17:34 - 2014-10-18 17:34 - 00099384 _____ () C:\Users\Andy\AppData\Roaming\inst.exe

2014-10-18 17:34 - 2014-10-18 17:34 - 00082816 _____ (VSO Software) C:\Users\Andy\AppData\Roaming\pcouffin.sys

2014-10-18 17:34 - 2014-10-18 17:34 - 00007859 _____ () C:\Users\Andy\AppData\Roaming\pcouffin.cat

2014-10-18 17:34 - 2014-10-18 17:34 - 00000055 _____ () C:\Users\Andy\AppData\Roaming\pcouffin.log

2014-10-18 17:34 - 2014-10-18 17:34 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Vso

2014-10-18 17:34 - 2014-10-18 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO

2014-10-18 17:34 - 2014-10-18 17:34 - 00000000 ____D () C:\Program Files (x86)\VSO

2014-10-18 17:23 - 2014-10-18 17:26 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\CyberLink

2014-10-18 17:22 - 2014-10-18 17:27 - 00000000 ____D () C:\Users\Public\CyberLink

2014-10-18 17:11 - 2014-10-18 17:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 5

2014-10-18 17:10 - 2014-10-18 17:12 - 00000000 ____D () C:\Users\Andy\AppData\Local\CyberLink

2014-10-18 17:10 - 2014-10-18 17:10 - 00000000 ____D () C:\Program Files\CyberLink

2014-10-18 17:09 - 2014-10-18 17:13 - 00000000 ____D () C:\ProgramData\SUPPORTDIR

2014-10-18 17:08 - 2014-10-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite

2014-10-18 17:08 - 2014-10-18 17:08 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\Windows\System32\Tasks\Apple

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\Users\Andy\AppData\Local\Apple

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\ProgramData\SmartSound Software Inc

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\ProgramData\eSellerate

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\Program Files (x86)\SmartSound Software

2014-10-18 17:08 - 2014-10-18 17:08 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update

2014-10-18 17:06 - 2014-11-09 23:02 - 00000000 ____D () C:\ProgramData\Temp

2014-10-18 17:06 - 2014-10-18 17:13 - 00000000 ____D () C:\Program Files (x86)\CyberLink

2014-10-18 17:06 - 2014-10-18 17:11 - 00000000 ____D () C:\ProgramData\install_clap

2014-10-16 04:16 - 2014-09-27 17:25 - 04183040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-10-16 04:16 - 2014-09-18 21:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-10-16 04:16 - 2014-09-18 20:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-10-16 04:16 - 2014-09-13 01:29 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-10-16 04:16 - 2014-09-13 00:49 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-10-16 04:16 - 2014-09-07 22:15 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-10-16 04:16 - 2014-09-07 20:46 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-10-16 04:16 - 2014-09-07 20:46 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-10-16 04:16 - 2014-09-07 19:08 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-10-16 04:16 - 2014-09-07 19:07 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-10-16 04:16 - 2014-09-07 19:05 - 03448320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-10-16 04:16 - 2014-09-07 19:04 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-10-16 04:16 - 2014-09-07 19:04 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-10-16 04:16 - 2014-09-07 19:03 - 01702400 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-10-16 04:16 - 2014-09-07 19:03 - 00839680 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-10-16 04:16 - 2014-09-07 18:59 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-10-16 04:16 - 2014-09-07 18:59 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-10-16 04:16 - 2014-09-07 18:56 - 00672256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-10-16 04:16 - 2014-09-07 18:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-10-16 04:16 - 2014-09-03 19:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-10-16 04:16 - 2014-09-03 18:57 - 00921600 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-10-16 04:16 - 2014-09-03 18:49 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-10-16 04:15 - 2014-09-25 17:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-10-16 04:15 - 2014-09-25 17:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-10-16 04:15 - 2014-09-25 17:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-10-16 04:15 - 2014-09-25 17:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-10-16 04:15 - 2014-09-25 17:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-10-16 04:15 - 2014-09-25 17:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-10-16 04:15 - 2014-09-18 20:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-10-16 04:15 - 2014-09-18 20:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-10-16 04:15 - 2014-09-18 20:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-10-16 04:15 - 2014-09-18 20:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-10-16 04:15 - 2014-09-18 20:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-10-16 04:15 - 2014-09-18 20:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-10-16 04:15 - 2014-09-18 20:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-10-16 04:15 - 2014-09-18 20:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-10-16 04:15 - 2014-09-18 19:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-10-16 04:15 - 2014-09-18 19:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-10-16 04:15 - 2014-09-18 19:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-10-16 04:15 - 2014-09-18 19:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-10-16 04:15 - 2014-09-18 19:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-10-16 04:15 - 2014-09-18 19:42 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-10-16 04:15 - 2014-09-18 19:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-10-16 04:15 - 2014-09-18 19:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-10-16 04:15 - 2014-09-18 19:20 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-10-16 04:15 - 2014-09-18 19:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-10-16 04:15 - 2014-09-18 18:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-10-16 04:15 - 2014-09-18 18:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-10-16 04:15 - 2014-09-18 18:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-10-16 04:15 - 2014-09-18 18:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-10-16 04:15 - 2014-09-13 01:02 - 02779648 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-10-16 04:15 - 2014-09-13 00:30 - 03117568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-10-16 04:15 - 2014-09-03 19:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-10-16 04:15 - 2014-09-03 19:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-10-15 22:51 - 2014-10-21 21:39 - 00000000 ____D () C:\Program Files\DVDFab 9

2014-10-15 22:51 - 2014-10-15 22:51 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\4922

2014-10-15 22:38 - 2014-10-15 22:38 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\2316

2014-10-15 05:59 - 2014-10-15 05:59 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-10-15 05:59 - 2014-10-15 05:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-10-15 05:59 - 2014-10-15 05:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-10-15 05:59 - 2014-10-15 05:59 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-10-13 07:53 - 2014-10-18 08:11 - 00000000 ____D () C:\Program Files\BitTorrent Sync

2014-10-13 07:02 - 2014-08-28 20:58 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-10-13 07:02 - 2014-08-28 18:56 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-10-13 07:02 - 2014-08-28 18:47 - 02321920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-10-13 07:02 - 2014-08-15 23:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-10-13 07:02 - 2014-08-15 23:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-10-13 07:02 - 2014-08-15 22:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-10-13 07:02 - 2014-08-15 22:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-10-13 07:02 - 2014-08-15 22:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-10-13 07:02 - 2014-08-15 20:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-10-13 07:02 - 2014-08-15 20:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-10-13 07:02 - 2014-08-15 19:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-10-13 07:02 - 2014-08-15 19:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-10-13 07:02 - 2014-08-15 19:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-10-13 07:02 - 2014-08-15 19:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-10-13 07:02 - 2014-08-15 19:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-10-13 07:02 - 2014-08-15 19:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-10-13 07:02 - 2014-08-15 19:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-10-13 07:02 - 2014-08-15 19:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-10-13 07:02 - 2014-08-15 19:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-10-13 07:02 - 2014-08-15 19:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-10-13 07:02 - 2014-08-15 19:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-10-13 07:02 - 2014-08-15 19:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-10-13 07:02 - 2014-08-15 19:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-10-13 07:02 - 2014-08-15 19:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-10-13 07:02 - 2014-08-15 19:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-10-13 07:02 - 2014-08-15 19:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-10-13 07:02 - 2014-08-15 19:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-10-13 07:02 - 2014-08-15 19:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-10-13 07:02 - 2014-08-15 19:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-10-13 07:02 - 2014-08-15 19:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-10-13 07:02 - 2014-08-15 19:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-10-13 07:02 - 2014-08-15 19:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-10-13 07:02 - 2014-08-15 19:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-10-12 17:13 - 2014-10-12 17:13 - 00000000 ____D () C:\Users\Andy\.pdfsam

2014-10-12 17:12 - 2014-10-12 17:12 - 00000000 ____D () C:\ProgramData\Soda PDF 6

2014-10-12 17:12 - 2014-10-12 17:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic

2014-10-12 17:12 - 2014-10-12 17:12 - 00000000 ____D () C:\Program Files (x86)\PDF Split And Merge Basic

2014-10-11 18:24 - 2014-10-11 18:24 - 00000290 _____ () C:\Users\Andy\Desktop\misc 2.txt

2014-10-11 18:24 - 2014-10-11 18:24 - 00000198 _____ () C:\Users\Andy\Desktop\misc.txt

2014-10-10 22:41 - 2014-10-10 22:41 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 23:25 - 2014-06-25 23:42 - 01550243 _____ () C:\Windows\WindowsUpdate.log

2014-11-09 23:23 - 2014-08-26 22:13 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\BitTorrent Sync

2014-11-09 23:23 - 2014-05-25 18:05 - 00000000 ___RD () C:\Users\Andy\Dropbox

2014-11-09 23:23 - 2014-05-25 17:33 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Dropbox

2014-11-09 23:22 - 2014-05-25 22:07 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-11-09 23:22 - 2014-05-25 17:33 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-11-09 23:21 - 2014-05-25 18:14 - 00000000 ____D () C:\ProgramData\VMware

2014-11-09 23:21 - 2013-08-22 09:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-11-09 23:20 - 2014-08-17 05:00 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Everything

2014-11-09 23:20 - 2014-05-25 17:31 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\ClassicShell

2014-11-09 23:04 - 2014-05-25 17:31 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\FileZilla

2014-11-09 23:02 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sru

2014-11-09 20:42 - 2014-05-25 17:33 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-11-09 20:08 - 2014-05-25 17:13 - 00003906 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{473D916B-98A7-443A-97BE-348A31305E34}

2014-11-09 19:55 - 2014-05-25 17:02 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3021083830-3497768333-1346254227-1001

2014-11-09 19:53 - 2014-03-18 05:04 - 00921930 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-11-09 19:47 - 2014-09-29 11:37 - 00000000 ____D () C:\Users\Andy\AppData\Local\CrashDumps

2014-11-09 19:47 - 2014-05-26 08:11 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\TeamViewer

2014-11-09 19:44 - 2014-05-25 18:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-11-09 19:44 - 2014-05-25 18:35 - 00000000 ____D () C:\Program Files\CCleaner

2014-11-09 19:33 - 2014-05-25 16:57 - 00000000 ____D () C:\Users\Andy

2014-11-09 08:13 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\FxsTmp

2014-11-09 07:17 - 2014-06-16 05:54 - 00000000 ____D () C:\Program Files\Pulseway

2014-11-08 22:22 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-11-08 11:37 - 2014-05-25 17:41 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\vlc

2014-11-07 18:54 - 2014-06-29 06:39 - 00000000 ____D () C:\ProgramData\Samsung

2014-11-05 23:39 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-11-05 23:38 - 2014-05-25 17:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-11-05 17:04 - 2014-05-25 18:44 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\VMware

2014-11-05 17:04 - 2014-05-25 18:44 - 00000000 ____D () C:\Users\Andy\AppData\Local\VMware

2014-11-05 07:23 - 2014-05-25 18:15 - 00934468 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-11-05 07:23 - 2014-05-25 18:14 - 00000000 ____D () C:\Program Files (x86)\VMware

2014-11-03 19:13 - 2014-06-05 07:13 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\calibre

2014-11-03 08:41 - 2014-06-05 07:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management

2014-11-03 08:41 - 2014-06-05 07:13 - 00000000 ____D () C:\Program Files (x86)\Calibre2

2014-11-03 07:14 - 2014-05-25 16:57 - 00000000 ____D () C:\Users\Andy\AppData\Local\Packages

2014-11-02 22:07 - 2014-05-25 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-11-02 22:07 - 2014-05-25 17:32 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-11-02 18:08 - 2014-07-16 08:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-11-02 05:03 - 2014-09-07 18:58 - 00141312 ___SH () C:\Users\Andy\Desktop\Thumbs.db

2014-10-30 06:25 - 2014-05-25 17:07 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-10-29 20:06 - 2014-06-02 20:32 - 00000000 ____D () C:\Windows\Minidump

2014-10-28 04:22 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\rescache

2014-10-27 22:43 - 2014-05-25 17:29 - 00000000 ____D () C:\ProgramData\Metabrowser 2.0

2014-10-27 22:41 - 2014-05-25 18:49 - 00000000 ____D () C:\Program Files\LinkShellExtension

2014-10-26 14:25 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ToastData

2014-10-26 14:25 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-10-26 14:24 - 2013-08-22 10:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-10-26 14:14 - 2014-06-15 12:10 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Server Essentials

2014-10-26 07:43 - 2014-09-19 05:41 - 00000000 ____D () C:\Program Files\Silicondust

2014-10-26 07:41 - 2014-05-25 16:57 - 00000000 ____D () C:\Users\Andy\AppData\Local\VirtualStore

2014-10-25 06:33 - 2014-05-25 21:41 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wugs Nexus Root Tookit

2014-10-25 06:33 - 2014-05-25 21:41 - 00000000 ____D () C:\Program Files (x86)\WugFresh Development

2014-10-23 22:16 - 2014-05-25 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R

2014-10-23 22:16 - 2014-05-25 22:44 - 00000000 ____D () C:\Program Files\R

2014-10-23 17:10 - 2014-05-25 17:25 - 00000000 ____D () C:\Program Files\Intel

2014-10-23 17:04 - 2014-05-26 19:54 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-10-22 05:52 - 2014-06-26 19:37 - 00000000 ____D () C:\Users\Andy\AppData\Local\paint.net

2014-10-21 21:47 - 2014-05-31 14:55 - 00000000 ____D () C:\Users\Andy\AppData\Roaming\HandBrake

2014-10-19 19:32 - 2014-05-25 18:56 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2014-10-19 19:32 - 2014-05-25 18:55 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-10-18 22:15 - 2014-09-18 22:55 - 00000000 ____D () C:\ProgramData\vsosdk

2014-10-18 18:51 - 2014-05-25 17:19 - 00000000 ____D () C:\Program Files\NetWorx

2014-10-18 18:51 - 2013-08-22 09:44 - 00515744 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-10-18 17:23 - 2014-08-08 21:29 - 00000000 ____D () C:\ProgramData\CyberLink

2014-10-18 08:44 - 2014-05-25 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetWorx

2014-10-18 08:07 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-10-18 08:07 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\FileManager

2014-10-18 08:07 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\Camera

2014-10-17 10:02 - 2014-05-25 17:19 - 00060408 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\networx.sys

2014-10-16 05:42 - 2014-05-25 17:06 - 00000000 ____D () C:\Windows\system32\MRT

2014-10-16 05:42 - 2013-08-22 08:25 - 00000167 _____ () C:\Windows\win.ini

2014-10-16 05:38 - 2014-05-25 17:06 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-10-15 22:53 - 2014-05-31 12:45 - 00000000 ____D () C:\Program Files (x86)\DVDFab 9

2014-10-15 05:59 - 2014-07-16 19:44 - 00000000 ____D () C:\ProgramData\Oracle

2014-10-15 05:59 - 2014-05-25 17:31 - 00000000 ____D () C:\Program Files (x86)\Java

2014-10-14 20:24 - 2014-05-25 17:32 - 00001122 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2014-10-13 20:10 - 2014-05-25 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-10-13 20:10 - 2014-05-25 17:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-10-13 07:03 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\WinStore

2014-10-13 05:55 - 2014-05-25 17:33 - 00000000 ____D () C:\Program Files (x86)\Google

2014-10-12 21:17 - 2014-05-25 18:19 - 00000000 ___RD () C:\Users\Andy\Google Drive

2014-10-12 07:38 - 2014-05-25 17:29 - 00000000 ____D () C:\Users\Andy\AppData\Local\Google

2014-10-12 07:37 - 2014-05-25 17:33 - 00003876 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-10-12 07:37 - 2014-05-25 17:33 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-10-10 05:08 - 2014-08-04 06:48 - 00000000 ____D () C:\Users\Andy\AppData\Local\Deployment

Some content of TEMP:

====================

C:\Users\Andy\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwq34wd.dll

C:\Users\Andy\AppData\Local\Temp\proxy_vole669734374146162116.dll

C:\Users\Andy\AppData\Local\Temp\Quarantine.exe

C:\Users\Andy\AppData\Local\Temp\SandboxieInstall.exe

C:\Users\Andy\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-06 04:35

==================== End Of Log ============================

andy_d · November 10, 2014

Addition...

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-11-2014 01

Ran by Andy at 2014-11-09 15:57:32

Running from D:\Temp

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.15.58233 - ABBYY)

ABBYY FineReader 9.0 Sprint (x32 Version: 9.00.15.58233 - ABBYY) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)

AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.04.01 - ASUSTeK Computer Inc.)

AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden

Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden

Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden

BitTorrent Sync (HKLM\...\BitTorrent Sync) (Version: 1.4.93 - BitTorrent Inc.)

Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden

Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden

Build Tools - amd64 (Version: 12.0.30501 - Microsoft Corporation) Hidden

Build Tools - x86 (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

Build Tools Language Resources - amd64 (Version: 12.0.30501 - Microsoft Corporation) Hidden

Build Tools Language Resources - x86 (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

calibre (HKLM-x32\...\{7C79A0FB-4C96-4538-B443-D99BDBA34995}) (Version: 2.8.0 - Kovid Goyal)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version: - The Behemoth)

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)

Citrix Receiver (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.1.0.0 - Citrix Systems, Inc.)

Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)

Complemento do Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

Complemento Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

Compon. agg. Microsoft Report Viewer per Visual Studio 2013 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5424.0 - CyberLink Corp.)

CyberLink PhotoDirector 5 (Version: 5.0.5424.0 - CyberLink Corp.) Hidden

CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.2930.0 - CyberLink Corp.)

CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.4028.08 - CyberLink Corp.)

Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden

Dreamfall Chapters (HKLM-x32\...\Steam App 237850) (Version: - Red Thread Games)

Dropbox (HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)

DVDFab 9.1.5.6 (27/06/2014) (HKLM\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)

Entity Framework 6.1.0 Tools for Visual Studio 2013 (HKLM-x32\...\{D4635FB4-434D-4663-A4C8-CFC00FA9D24E}) (Version: 12.0.30228.0 - Microsoft Corporation)

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)

EPSON Connect version 1.0 (HKLM-x32\...\EPSON Connect_is1) (Version: 1.0 - Epson America Inc.)

Epson Event Manager (HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version: 3.01.0003 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.30.00 - SEIKO EPSON CORPORATION)

Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )

EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)

EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version: - SEIKO EPSON Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)

eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden

Evernote v. 5.6.4 (HKLM-x32\...\{DFDF0BE2-2D71-11E4-9454-00163E98E7D6}) (Version: 5.6.4.4632 - Evernote Corp.)

Everything 1.3.4.686 (x64) (HKLM\...\Everything) (Version: - )

FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)

FlashFXP 4 (HKLM-x32\...\FlashFXP 4) (Version: 4.4.4.2046 - OpenSight Software LLC)

Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.0.3.916 - Foxit Software Inc.)

Git version 1.9.4-preview20140611 (HKLM-x32\...\Git_is1) (Version: 1.9.4-preview20140611 - The Git Development Community)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.52 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden

Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)

Gunpoint (HKLM-x32\...\Steam App 206190) (Version: - Suspicious Developments)

HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )

HDHomeRun (HKLM\...\{3404F1A7-1A05-44EF-B482-D2BAB39C2B51}) (Version: 1.0.17188.0 - Silicondust)

HDHomeRun VIEW (HKLM\...\{D8C9DEDB-72A2-48FA-9432-E8D018CAEE9B}) (Version: 1.0.17178.0 - Silicondust)

Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)

IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)

IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )

IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden

Intel® Network Connections 19.3.141.0 (HKLM\...\PROSetDX) (Version: 19.3.141.0 - Intel)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)

Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)

Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

Java SE Development Kit 7 Update 55 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170550}) (Version: 1.7.0.550 - Oracle)

Kentucky Route Zero (HKLM-x32\...\Steam App 231200) (Version: - Cardboard Computer)

LAN Speed Test (HKLM-x32\...\{CE48BAE6-CDEF-4EB2-9AB0-67018F25C7C4}_is1) (Version: 3.4 - Totusoft) <==== ATTENTION

LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)

Lights-Out Client x64 (HKLM\...\{DA0D6B4B-EED6-4EE8-9ECF-0F7D83F5E0CE}) (Version: 1.5.5.2136 - AxoNet Software GmbH)

Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.5.1 - Hermann Schinagl)

LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden

LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden

Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)

Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)

Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)

MakeMKV v1.8.13 (HKLM-x32\...\MakeMKV) (Version: v1.8.13 - GuinpinSoft inc)

Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

MCE Standby Tool 0.9.102 (HKLM-x32\...\{E5BD7FEB-28BF-4EF2-82FB-C7360B563A75}_is1) (Version: 0.9.102 - Herman van Eijk)

MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)

Memory Profiler (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

meta<browser/> 2.3.34 (HKLM-x32\...\{BF013BEB-3770-4480-B315-3D12ECB34550}) (Version: 2.3.34 - meta<browser/>)

Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)

Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)

Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{0b3e9a26-155d-42c3-aac0-b7571833df38}) (Version: 12.0.30501 - Microsoft Corporation)

Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)

Module Microsoft Report Viewer pour Visual Studio 2013 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Mp3tag v2.61a (HKLM-x32\...\Mp3tag) (Version: v2.61a - Florian Heidenreich)

MyHarmony (HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech)

NetWorx 5.3.3 (HKLM\...\NetWorx_is1) (Version: - Softperfect Research)

Newsbin for Astraweb (HKLM\...\Newsbin6) (Version: 6.53 - DJI Interprises, LLC)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

Online Plug-in (x32 Version: 14.1.0.0 - Citrix Systems, Inc.) Hidden

Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden

OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )

Outils de vérification linguistique 2013 de Microsoft Office - Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

paint.net (HKLM\...\{3F5F509B-E226-417C-8CD1-CAAE756C328A}) (Version: 4.0.0 - dotPDN LLC)

PDF Split And Merge Basic (HKLM\...\{9A40D2F8-9458-458B-95E3-B57797C574E1}) (Version: 2.2.4 - Andrea Vacondio)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden

Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)

Pulseway (HKLM\...\{2C1024A7-0A82-4477-B89C-9C8B9A98E387}) (Version: 4.4.1 - MMSOFT Design)

PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham)

Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.35.716.2014 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)

Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

RStudio (HKLM-x32\...\RStudio) (Version: 0.98.1028 - RStudio)

RT 7 Lite (64-Bit) (HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\RT 7 Lite x64) (Version: 2.6.0 - Rockers Team)

RT 7 Lite x64 (Version: 2.6.0 - Rockers Team) Hidden

Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.)

Samsung Kies3 (x32 Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Sandboxie 4.12 (64-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC)

Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)

Self-service Plug-in (x32 Version: 4.1.0.41738 - Citrix Systems, Inc.) Hidden

Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)

SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden

Shark007 Advanced Codecs (HKLM-x32\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 4.6.5 - Shark007)

Should I Remove It (HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\Should I Remove It 1.0.4) (Version: 1.0.4 - Reason Software Company Inc.)

Should I Remove It (x32 Version: 1.0.4 - Reason Software Company Inc.) Hidden

SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)

SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden

Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)

South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)

Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform)

SSDlife Free (HKLM-x32\...\{18302BF2-AA3C-46E3-B039-996FD0DB5639}) (Version: 2.5.82 - BinarySense Inc.)

State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)

Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)

SteamWorld Dig (HKLM-x32\...\Steam App 252410) (Version: - Image&Form)

Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

SyncBackSE (HKLM-x32\...\SyncBackSE_is1) (Version: 6.5.48.0 - 2BrightSparks)

System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)

Tableau Public 8.2 (32-bit) (HKLM-x32\...\{EB2DE5B0-FEBD-48E9-AD0F-93CC84B2BD6F}) (Version: 8.2.371 - Tableau Software)

Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)

The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)

TypeScript Power Tool (x32 Version: 1.0.1.0 - Microsoft Corporation) Hidden

TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.1.0 - Microsoft Corporation) Hidden

Ultimate Vocabulary 2014 (HKLM-x32\...\{E9AFB88A-9133-4348-BE7C-EDEFE0A1B6CF}) (Version: 14.0 - eReflect)

Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)

Valiant Hearts: The Great War™ / Soldats Inconnus : Mémoires de la Grande Guerre™ (HKLM-x32\...\Steam App 260230) (Version: - Ubisoft Montpellier)

Virtual Account Numbers (HKLM-x32\...\{DE700910-58F7-4D2E-B7E6-3BA2DA1B6806}) (Version: 4.0.0.2253 - Citi)

Virtual Account Numbers (x32 Version: 1.0.6.0 - Citi) Hidden

VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)

Visual Studio 2013 Update 2 (KB2829760) (HKLM-x32\...\{3c348532-c3bd-4bae-a928-7b555f8c808f}) (Version: 12.0.30501 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 10.0.4 - VMware, Inc)

VMware Workstation (Version: 10.0.4 - VMware, Inc.) Hidden

VS Update core components (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.2.0.22 - VSO Software)

WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden

WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden

WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)

WinDirStat 1.1.2 (HKU\S-1-5-21-3021083830-3497768333-1346254227-1001\...\WinDirStat) (Version: - )

Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{940596e5-652a-4970-8a5a-492e73ed0fbb}) (Version: 12.0.30501.0 - Microsoft Corporation)

Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden

Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.40326.0 - Microsoft Corporation) Hidden

x64 Components v4.6.5 (HKLM\...\Advanced x64Components_is1) (Version: 4.6.5 - Shark007)

XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)

Надстройка Microsoft Report Viewer для Visual Studio 2013 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

用于 Visual Studio 2013 的 Microsoft 报告查看器加载项 (x32 Version: 11.1.3411.3 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3021083830-3497768333-1346254227-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Andy\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

02-11-2014 23:08:08 Installed Microsoft SQL Server Compact 3.5 SP2 ENU

06-11-2014 04:36:51 Installed AI Suite II

09-11-2014 03:53:31 Installed Should I Remove It

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {268EE89A-0AFA-4A83-8274-8F0233EE613F} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\RDP Group Configuration => cmd.exe

Task: {2812D86F-58D2-4C05-AE67-E3394AFFB00D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {2F67BFD3-F8DF-4027-A8F0-63AC63084D8E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe

Task: {302E88F5-8FAE-4149-9D5C-F541A10F04F1} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] ()

Task: {30D282A6-2BAE-4811-920A-E6300D71B6DB} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\File History Settings Synchronization => C:\Windows\System32\Essentials\ClientOperator.exe [2013-08-22] (Microsoft Corporation)

Task: {5F329846-2779-4ADB-A9A5-FD6143B65CF7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {68CA9954-DD50-4074-9E1A-D5592A3B1E9B} - System32\Tasks\ASUS\Easy Update => C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe [2013-01-14] ()

Task: {6AC5A97E-D588-46B5-A1B2-797527A04DE6} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)

Task: {6E992752-3AAA-4D29-88CE-412E0BF74EA8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)

Task: {84190360-41E7-4DD3-9F27-A4074AD79BBE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)

Task: {92B7A9A5-01B0-4CEE-B718-B5D90654C1DA} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\Add-in Management => C:\Windows\System32\Essentials\RunTask.exe [2013-08-22] (Microsoft Corporation)

Task: {A6405590-282A-495C-8794-990FE5A10801} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-10-16] (Microsoft Corporation)

Task: {A747AD16-DBBE-497D-85E2-93B3AF175EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)

Task: {BD66886B-36B3-477F-9C4A-9EC1169C687B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)

Task: {BE1EE617-CA78-40CC-88FA-FF4868203D76} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\VPN Routes Repair => C:\Windows\System32\Essentials\RunTask.exe [2013-08-22] (Microsoft Corporation)

Task: {CA6A2F1C-65A9-4F22-B9DF-C4C8FF508796} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\Health Definition Update => C:\Windows\System32\Essentials\RunTask.exe [2013-08-22] (Microsoft Corporation)

Task: {CCE13753-8986-4DF7-8D68-987EBDDF2589} - System32\Tasks\Microsoft\Windows\Windows Server Essentials\Alert Evaluations => C:\Windows\System32\Essentials\RunTask.exe [2013-08-22] (Microsoft Corporation)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-08-17 05:00 - 2014-08-05 20:04 - 01441792 _____ () C:\Program Files\Everything\Everything.exe

2014-06-11 08:11 - 2013-08-05 20:12 - 00266240 _____ () C:\Program Files\Pulseway\OpenHardwareMonitorLib.dll

2014-10-18 17:09 - 2012-08-08 20:36 - 00254552 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

2014-10-29 14:27 - 2014-10-29 14:27 - 14407384 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe

2014-11-05 23:36 - 2013-09-17 18:58 - 00920736 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe

2014-09-16 12:50 - 2014-09-16 12:50 - 08896160 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2004-09-30 13:15 - 2004-09-30 13:15 - 00192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll

2014-11-05 23:37 - 2013-01-14 16:37 - 01406776 ____N () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe

2014-05-01 14:29 - 2014-05-01 14:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2014-05-25 17:19 - 2014-06-06 14:41 - 00718336 _____ () C:\Program Files\NetWorx\sqlite.dll

2014-05-25 17:19 - 2014-10-17 10:02 - 00146424 _____ () C:\Program Files\NetWorx\nfapi.dll

2014-11-05 17:43 - 2014-11-04 20:25 - 01408328 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\libglesv2.dll

2014-11-05 17:43 - 2014-11-04 20:25 - 00204616 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\libegl.dll

2014-11-05 17:43 - 2014-11-04 20:25 - 10689352 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\pdf.dll

2014-11-05 17:43 - 2014-11-04 20:25 - 01856840 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.52\ffmpegsumo.dll

2014-01-30 01:02 - 2014-01-30 01:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-02-11 13:21 - 2014-02-11 13:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2014-02-11 13:22 - 2014-02-11 13:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2014-02-11 13:21 - 2014-02-11 13:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2014-02-11 13:22 - 2014-02-11 13:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2014-10-29 15:01 - 2014-10-29 15:01 - 01261272 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll

2014-11-05 23:36 - 2014-11-09 13:40 - 00024576 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll

2014-11-05 23:36 - 2010-06-29 10:58 - 00104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll

2014-09-16 12:50 - 2014-09-16 12:50 - 08896160 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2004-09-30 12:09 - 2004-09-30 12:09 - 00155648 _____ () C:\Program Files\LinkShellExtension\32\RockallDLL.dll

2014-11-05 23:37 - 2013-01-14 17:16 - 05771136 ____N () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzULIB.dll

2014-11-05 23:37 - 2010-06-21 15:21 - 00208896 ____N () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\ImageHelper.dll

2014-11-05 23:37 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll

2014-11-05 23:37 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll

2014-11-05 23:37 - 2012-10-08 17:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll

2014-11-05 23:37 - 2013-01-15 15:30 - 01040896 ____N () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EasyUpdt.dll

2014-11-05 23:37 - 2013-04-15 14:19 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll

2014-11-05 23:37 - 2012-05-28 21:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll

2014-11-05 23:37 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll

2014-11-05 23:37 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll

2014-11-05 23:37 - 2012-08-29 18:09 - 00875520 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll

2014-11-05 23:36 - 2010-08-23 10:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll

2014-11-05 23:37 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll

2014-11-05 23:37 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll

2014-11-09 13:42 - 2014-11-09 13:42 - 00043008 _____ () c:\users\andy\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpc1qhpe.dll

2013-08-23 14:01 - 2013-08-23 14:01 - 25100288 _____ () C:\Users\Andy\AppData\Roaming\Dropbox\bin\libcef.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 00436576 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 00318304 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 21118304 _____ () C:\Program Files (x86)\Evernote\Evernote\libcef.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 00985968 _____ () C:\Program Files (x86)\Evernote\Evernote\avcodec-54.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 00136048 _____ () C:\Program Files (x86)\Evernote\Evernote\avutil-51.dll

2014-08-26 15:47 - 2014-08-26 15:47 - 00192368 _____ () C:\Program Files (x86)\Evernote\Evernote\avformat-54.dll

2014-08-17 05:13 - 2014-01-07 07:40 - 00039424 _____ () C:\Program Files (x86)\Virtual Account Numbers\VANRes.dll

2014-10-18 17:09 - 2014-07-01 03:35 - 00866056 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\common\UNO\UNO.dll

2014-10-18 17:09 - 2013-12-10 02:39 - 00074240 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ctypes.pyd

2014-10-18 17:09 - 2013-12-10 02:39 - 00285184 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_hashlib.pyd

2014-10-18 17:09 - 2013-12-10 02:39 - 00040960 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_socket.pyd

2014-10-18 17:09 - 2013-12-10 02:39 - 00721920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Common\Koan\_ssl.pyd

2014-10-18 17:09 - 2014-07-01 03:34 - 00044296 _____ () C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DHProcedure\DHProcedure.dll

2011-07-18 16:07 - 2011-07-18 16:07 - 00014336 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll

2014-01-06 18:42 - 2014-01-06 18:42 - 01611264 _____ () C:\Program Files (x86)\Notepad++\plugins\NppFTP.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrator (S-1-5-21-3021083830-3497768333-1346254227-500 - Administrator - Disabled)

Andy (S-1-5-21-3021083830-3497768333-1346254227-1001 - Administrator - Enabled) => C:\Users\Andy

Guest (S-1-5-21-3021083830-3497768333-1346254227-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3021083830-3497768333-1346254227-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/09/2014 08:40:24 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume Recovery was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (11/09/2014 08:38:34 AM) (Source: SideBySide) (EventID: 35) (User: )

Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.

Component identity found in manifest does not match the identity of the component requested.

Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".

Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".

Please use sxstrace.exe for detailed diagnosis.

Error: (11/09/2014 08:38:20 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".

Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (11/09/2014 08:38:20 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".

Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (11/09/2014 07:25:34 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4

Error: (11/09/2014 07:25:33 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/08/2014 10:57:30 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Main)

Description: Application or service 'EpsonCustomerParticipation' could not be restarted.

Error: (11/08/2014 10:53:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: ShouldIRemoveIt.exe, version: 1.0.4.30407, time stamp: 0x54078dde

Faulting module name: LSASRV.dll, version: 6.3.9600.17334, time stamp: 0x5407b549

Exception code: 0xc0000005

Fault offset: 0x000000000004e4ee

Faulting process id: 0x7a0

Faulting application start time: 0xShouldIRemoveIt.exe0

Faulting application path: ShouldIRemoveIt.exe1

Faulting module path: ShouldIRemoveIt.exe2

Report Id: ShouldIRemoveIt.exe3

Faulting package full name: ShouldIRemoveIt.exe4

Faulting package-relative application ID: ShouldIRemoveIt.exe5

Error: (11/08/2014 10:53:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:

Access is denied.

.

Error: (11/08/2014 06:26:22 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume Recovery was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

System errors:

=============

Error: (11/09/2014 02:48:01 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/09/2014 08:38:31 AM) (Source: DCOM) (EventID: 10010) (User: Main)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (11/09/2014 08:38:01 AM) (Source: DCOM) (EventID: 10010) (User: Main)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (11/08/2014 11:37:50 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/08/2014 05:31:15 AM) (Source: DCOM) (EventID: 10010) (User: Main)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (11/08/2014 05:30:45 AM) (Source: DCOM) (EventID: 10010) (User: Main)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (11/08/2014 05:21:38 AM) (Source: DCOM) (EventID: 10010) (User: Main)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (11/08/2014 04:09:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Steam Client Service service failed to start due to the following error:

%%1053

Error: (11/08/2014 04:09:38 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

Error: (11/07/2014 06:18:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Steam Client Service service failed to start due to the following error:

%%1053

Microsoft Office Sessions:

=========================

Error: (11/09/2014 08:40:24 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: RecoveryThe parameter is incorrect. (0x80070057)

Error: (11/09/2014 08:38:34 AM) (Source: SideBySide) (EventID: 35) (User: )

Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"c:\program files (x86)\microsoft office\Office15\lync.exe.Manifestc:\program files (x86)\microsoft office\Office15\UccApi.DLL1

Error: (11/09/2014 08:38:20 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: PDR.X,type="win32",version="1.0.0.0"c:\program files\cyberlink\photodirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest

Error: (11/09/2014 08:38:20 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: PDR.X,type="win32",version="1.0.0.0"c:\program files\cyberlink\photodirector5\Kernel\CES\CES_CacheAgent.exe.Manifest

Error: (11/09/2014 07:25:34 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4

Error: (11/09/2014 07:25:33 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/08/2014 10:57:30 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Main)

Description: 0C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exeEpsonCustomerParticipation03026217819320

Error: (11/08/2014 10:53:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: ShouldIRemoveIt.exe1.0.4.3040754078ddeLSASRV.dll6.3.9600.173345407b549c0000005000000000004e4ee7a001cffbd0c03fd9ccC:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exeC:\Windows\SYSTEM32\LSASRV.dll02dcf553-67c4-11e4-8295-f46d0447b7c8

Error: (11/08/2014 10:53:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description:

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:

Access is denied.

Error: (11/08/2014 06:26:22 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: RecoveryThe parameter is incorrect. (0x80070057)

CodeIntegrity Errors:

===================================

Date: 2014-11-09 08:37:34.821

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-07 08:23:23.259

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-06 04:35:11.255

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-05 08:02:59.047

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:53.263

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:53.208

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:52.951

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:52.896

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:52.646

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-11-02 09:00:52.592

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel® Core i5-2500K CPU @ 3.30GHz

Percentage of memory in use: 37%

Total physical RAM: 16281.15 MB

Available physical RAM: 10102.15 MB

Total Pagefile: 32665.15 MB

Available Pagefile: 24591.84 MB

Total Virtual: 131072 MB

Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Win8) (Fixed) (Total:118.73 GB) (Free:61.07 GB) NTFS

Drive d: (Temp) (Fixed) (Total:931.51 GB) (Free:440.59 GB) NTFS

Drive e: (Games) (Fixed) (Total:465.76 GB) (Free:226.65 GB) NTFS

Drive f: (Archive) (Fixed) (Total:1863.01 GB) (Free:804.79 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 151FFCFD)

Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (Size: 119.2 GB) (Disk ID: 3A4A95C1)

Partition: GPT Partition Type.

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 22239BB4)

Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================

Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: D156A280)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

andy_d · November 10, 2014

In case it helps...source code info that shows up in Chrome...

<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html lang="en" class="no-js"><head>    <meta http-equiv="Cache-Control" content="no-cache" />    <meta http-equiv="Pragma" content="no-cache" />    <meta http-equiv="Expires" content="0" />    <meta http-equiv="content-type" content="text/html;charset=utf-8" />    <title>FoxyDeal TopBar</title>    <link rel="stylesheet" type="text/css" href="../../css/style.css" />    <!--<link rel="stylesheet" type="text/css" href="style.css" />-->    <link rel="stylesheet" type="text/css" href="https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.0/themes/ui-lightness/jquery-ui.css" />    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css" type="text/css" media="screen" />    <style type="text/css">        .partner-text {            float: inherit;            position: relative;            top: 5px;            right: 5px;            clear: both;        }    </style>    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.8.1/jquery.min.js" type="text/javascript"></script>    <script src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.0/jquery-ui.js" type="text/javascript"></script>    <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js"></script>    <script type="text/javascript">        // create global FoxyDeal object        var FoxyDeal = {};        FoxyDeal.partner = (function () {            var pinfo = {};            var urlSplit = document.location.href.split('?');            if (urlSplit.length > 1) {                var params = urlSplit[1].replace(/\#.*/, '').split('&');                for (var pInt = 0; pInt < params.length; pInt++) {                    var param = params[pInt].split('=');                    pinfo[param[0]] = param[1];                }            }            return pinfo;        })();        if (FoxyDeal.partner.appid) {            FoxyDeal.partner.appid = decodeURIComponent(FoxyDeal.partner.appid);        }        if (FoxyDeal.partner.applink) {            FoxyDeal.partner.applink = decodeURIComponent(FoxyDeal.partner.applink);        }        if (!FoxyDeal.partner.id) {            FoxyDeal.partner.id = '1001';        }        if (!FoxyDeal.partner.subid) {            FoxyDeal.partner.subid = 'sfv4';        }        FoxyDeal.log = {            error: function (log_msg) {                parent.postMessage(JSON.stringify({                    FoxyDeal: { log: true },                    eventName: 'error',                    data: log_msg                }), '*');            },            info: function (log_msg) {                parent.postMessage(JSON.stringify({                    FoxyDeal: { log: true },                    eventName: 'info',                    data: log_msg                }), '*');            }        };        FoxyDeal.version = '6.4.1';        FoxyDeal.insertCSS = function (CSSstr) {            var head = document.getElementsByTagName('head')[0];            var style = document.createElement('style');            style.type = 'text/css';            if (style.styleSheet) {                style.styleSheet.cssText = CSSstr;            } else {                style.appendChild(document.createTextNode(CSSstr));            }            head.appendChild(style);            return style;        };        // set API variables        FoxyDeal.api = (function () {            var apiHosts = {                live: 'api.foxydeal.com',                staging: 'foxydeal-api-staging.herokuapp.com',                custom: localStorage.fdCustomApiHost            };            var protocol = 'https';            var domain = apiHosts[localStorage.fdApiHost] ? apiHosts[localStorage.fdApiHost] : apiHosts.live;            var version = 'v2.0';            return {                baseURL: protocol + '://' + domain + '/' + version + '/',                version: version,                domain: domain            };        })();        // cross browser "addEventListener" method        FoxyDeal.addEventListener = function (element, eventName, eventHandler) {            if (element.addEventListener) {                element.addEventListener(eventName, eventHandler, false);            } else if (element.attachEvent) {                element.attachEvent('on' + eventName, eventHandler);            }        };        // cross browser "removeEventListener" method        FoxyDeal.removeEventListener = function (element, eventName, eventHandler) {            if (element.removeEventListener) {                element.removeEventListener(eventName, eventHandler, false);            } else if (element.detachEvent) {                element.detachEvent('on' + eventName, eventHandler);            }        };        // attaches message event listener and exposes function via which "event listeners" can be registered on a specific cross-domain iframe        FoxyDeal.addMessageListener = (function () {            var handlers = {};            FoxyDeal.addEventListener(window, 'message', function (msg) {                try {                    var msgObj = JSON.parse(msg.data);                    var source = (function () {                        if (!msgObj.FoxyDeal) {                            return null;                        }                        for (var key in msgObj.FoxyDeal) {                            return key;                        }                        return null;                    })();                    if (!source || !msgObj.eventName) {                        return;                    }                    if (!source) {                        FoxyDeal.log.error(21);                        return;                    }                    msgObj.data = msgObj.data || null;                    var methods = handlers[source];                    if (!methods) {                        FoxyDeal.log.error(22);                        return;                    }                    for (var hInt = 0; hInt < methods.length; hInt++) {                        try {                            methods[hInt](msgObj.eventName, msgObj.data);                        } catch (ex) {                            FoxyDeal.log.error(23);                        }                    }                } catch (ex) {                    FoxyDeal.log.error(24);                }            });            return function (source, handler) {                handlers[source] = handlers[source] || [];                handlers[source].push(handler);            };        })();        // method used for registering callbacks which should be executed after <body> element is added to page        FoxyDeal.onBodyReady = (function () {            var callbacks = [];            var isBodyReady = function () {                return document.body ? true : false;            };            var exeCallbacks = function () {                for (var i = 0; i < callbacks.length; i++) {                    callbacks[i]();                }            };            var fallback = function () {                if (document.addEventListener) {                    var DCL_listener = function () {                        document.removeEventListener('DOMContentLoaded', DCL_listener, false);                        exeCallbacks();                    };                    document.addEventListener('DOMContentLoaded', DCL_listener, false);                } else if (document.attachEvent) {                    var RSC_listener = function () {                        if (isBodyReady()) {                            document.detachEvent('onreadystatechange', RSC_listener);                            exeCallbacks();                        }                    };                    document.attachEvent('onreadystatechange', RSC_listener);                }            };            var attemptCount = 0;            var bodyCreatedLoop = function () {                if (isBodyReady()) {                    exeCallbacks();                } else {                    if (attemptCount < 20) {                        setTimeout(bodyCreatedLoop, 100);                    } else {                        fallback();                    }                }            };            if (!isBodyReady()) {                bodyCreatedLoop();            }            return function (eventHandler) {                if (isBodyReady()) {                    eventHandler();                } else {                    callbacks.push(eventHandler);                }            };        })();        // provides simple storage methods        FoxyDeal.storage = {            get: function (key, defaultValue) {                if (localStorage[key]) {                    try {                        return JSON.parse(localStorage[key]);                    } catch (ex) {                    }                }                if (defaultValue === undefined) {                    return null;                }                return defaultValue;            },            set: function (key, newValue) {                localStorage[key] = JSON.stringify(newValue);            },            remove: function (key) {                if (localStorage[key]) {                    delete localStorage[key];                }            }        };        // adds ability to (un)register & fire "events" on main page (which are supposed to be fired/caught by main.js)        FoxyDeal.mainJS = (function () {            var handlers = {};            FoxyDeal.addMessageListener('mainJS', function (eventName, data) {                // FoxyDeal.log.info('Received event from main.js, eventName: ' + eventName + ', data: ' + JSON.stringify(data));                var methods = handlers[eventName];                if (!methods) {                    FoxyDeal.log.error(eventName);                    return;                }                for (var hInt = 0; hInt < methods.length; hInt++) {                    try {                        methods[hInt](data);                    } catch (ex) {                        FoxyDeal.log.error(26);                    }                }            });            return {                addEventListener: function (eventName, eventHandler) {                    handlers[eventName] = handlers[eventName] || [];                    handlers[eventName].push(eventHandler);                },                removeEventListener: function (eventName, eventHandler) {                    if (!handlers[eventName]) {                        return;                    }                    var methods = handlers[eventName];                    for (var hInt = 0; hInt < methods.length; hInt++) {                        try {                            if (methods[hInt] === eventHandler) {                                methods.splice(hInt, 1);                            };                        } catch (ex) {                        }                    }                },                fireEvent: function (eventName, data) {                    parent.postMessage(JSON.stringify({                        FoxyDeal: { topBar: true },                        eventName: eventName,                        data: data                    }), '*');                }            };        })();        // allows ajax requests to API via "proxy" iframe        FoxyDeal.ajax = (function () {            var requests = [];            var ready = false;            var loading = false;            var callbacks = [];            var proxyIframe;            var send = function (options, onResponse) {                FoxyDeal.log.info(27);                proxyIframe.contentWindow.postMessage(JSON.stringify({                    FoxyDeal: { topBar: true },                    eventName: 'request',                    data: {                        options: options,                        id: callbacks.push(onResponse) - 1                    }                }), '*');            };            // listens for messages from proxy iframe and executes code based on "eventName"            FoxyDeal.addMessageListener('ajax', function (eventName, eventData) {                if (eventName === 'ready') {                    ready = true;                    for (var rInt = 0; rInt < requests.length; rInt++) {                        send(requests[rInt].options, requests[rInt].onResponse);                    }                } else if (eventName === 'response') {                    var response = eventData;                    callbacks[response.id](response.data, response.textStatus, response.jqXHR);                }            });            // loads proxy iframe            var init = function (options, onResponse) {                FoxyDeal.log.info(28);                requests.push({                    options: options,                    onResponse: onResponse                });                if (loading) {                    return;                }                loading = true;                proxyIframe = document.createElement('iframe');                proxyIframe.id = 'FoxyDealAjaxProxy';                proxyIframe.style.display = 'none';                proxyIframe.src = 'https://' + FoxyDeal.api.domain + '/transport/sf/ajax/v1.0.0/prox.html';                FoxyDeal.onBodyReady(function () {                    document.body.appendChild(proxyIframe);                });            };            return {                send: function (options, onResponse) {                    if (ready) {                        send(options, onResponse);                    } else {                        init(options, onResponse);                    }                }            };        })();        // provides simple time functions        FoxyDeal.time = {            stamp: function () {                var d = new Date();                return d.getTime();            },            string: function (timestamp) {                var d = new Date();                if (timestamp) {                    d.setTime(timestamp);                }                return d.toDateString();            },            past4am: function () {                var d = new Date();                var h = d.getHours();                return (h - 4) > 0;            },            dayPassed: function (timestamp) {                return FoxyDeal.time.string() !== FoxyDeal.time.string(timestamp);            }        };        // manages ajax request attempts        FoxyDeal.shouldAttempt = function (id) {            var attemptID = 'attempt_' + id;            var lastAttempt = FoxyDeal.storage.get(attemptID, null);            if (lastAttempt === null) {                FoxyDeal.storage.set(attemptID, FoxyDeal.time.stamp());                return true;            }            var attempt = FoxyDeal.time.dayPassed(lastAttempt) && FoxyDeal.time.past4am();            if (attempt === true) {                FoxyDeal.storage.set(attemptID, FoxyDeal.time.stamp());            }            return attempt;        };        // downloads UID and exposes it to rest of code        FoxyDeal.uid = (function () {            var handlers = [];            var available = false;            var execHandlers = function () {                available = true;                for (var hInt = 0; hInt < handlers.length; hInt++) {                    try {                        handlers[hInt]();                    } catch (ex) {                    }                }            };            var getUID = function () {                FoxyDeal.log.info(29);                // build URL                var url = FoxyDeal.api.baseURL + 'uid';                url += '/' + FoxyDeal.partner.id;                url += '/' + FoxyDeal.partner.subid;                var postObj = {                    version: FoxyDeal.version                };                if (FoxyDeal.partner.transaction_id) {                    postObj.transactionId = FoxyDeal.partner.transaction_id;                }                FoxyDeal.ajax.send({                    dataType: 'json',                    url: url,                    type: 'post',                    data: encodeURIComponent(JSON.stringify(postObj))                }, function (data, textStatus, jqXHR) {                    try {                        if (jqXHR.status === 200) {                            FoxyDeal.partner.uid = JSON.parse(jqXHR.responseText).uid;                            FoxyDeal.log.info(30);                            FoxyDeal.storage.set('uid', FoxyDeal.partner.uid);                            execHandlers();                        }                    } catch (ex) {                        FoxyDeal.log.error(31);                    }                });            };            if (!FoxyDeal.partner.uid) {                FoxyDeal.partner.uid = FoxyDeal.storage.get('uid', '');            }            if (FoxyDeal.partner.uid === '' && FoxyDeal.shouldAttempt('uid')) {                getUID();            } else if (FoxyDeal.partner.uid) {                execHandlers();            }            FoxyDeal.buttonLocation = function () {                var e = document.getElementById('compare-button');                var offsetX = 0;                while (e) {                    offsetX += e.offsetLeft;                    e = e.offsetParent;                }                return offsetX;            };            FoxyDeal.mainJS.addEventListener('getButtonLocation', function (displayed) {                FoxyDeal.mainJS.fireEvent('buttonLocation', FoxyDeal.buttonLocation());            });            return {                onAvailable: function (handler) {                    if (available) {                        handler();                    } else {                        handlers.push(handler);                    }                }            };        })();        FoxyDeal.uid.onAvailable(function () {            if (FoxyDeal.partner.subid == 'ptv7ff' || !FoxyDeal.partner.ext) {                if (!FoxyDeal.shouldAttempt('domainArray')) {                    FoxyDeal.log.info(33);                    return;                }                // build URL                var url = FoxyDeal.api.baseURL + 'rules/shops/dau';                var postObj = {                    uid: FoxyDeal.partner.uid,                    version: FoxyDeal.version                };                FoxyDeal.ajax.send({                    dataType: 'json',                    url: url,                    type: 'post',                    data: encodeURIComponent(JSON.stringify(postObj))                }, function (data, textStatus, jqXHR) {                });            }        });        FoxyDeal.language = (function () {            //get detected language from storage            var detectedLanguage = FoxyDeal.storage.get('detectedLanguageV2', null);            //return language if found in storage            if (detectedLanguage) {                return detectedLanguage;            }            //set language to 'en' (default)            detectedLanguage = 'en';            // list from http://msdn.microsoft.com/en-us/library/windows/apps/jj657969.aspx            var supportedLanguages = {                de: ['de', 'de-de', 'de-ch', 'de-at', 'de-lu', 'de-li'],                es: ['es', 'es-es', 'es-ar', 'es-bo', 'es-cl', 'es-co', 'es-cr', 'es-do', 'es-ec', 'es-gt', 'es-hn', 'es-mx', 'es-ni', 'es-pa', 'es-pe', 'es-pr', 'es-py', 'es-sv', 'es-uy', 'es-ve'],                fr: ['fr', 'fr-fr', 'fr-be', 'fr-ca', 'fr-ch', 'fr-lu'],                it: ['it', 'it-it', 'it-ch'],                pt: ['pt', 'pt-br', 'pt-pt'],                ru: ['ru', 'ru-ru'],                pl: ['pl', 'pl-pl']            };            var navigatorLanguage = ((navigator.language) ? navigator.language : navigator.userLanguage).toLowerCase();            //set new value for detected language if it's one of supported languages            for (var languageCode in supportedLanguages) {                if ($.inArray(navigatorLanguage, supportedLanguages[languageCode]) > -1) {                    detectedLanguage = languageCode;                    break;                }            }            //store detected language for later use and return for current use            FoxyDeal.storage.set('detectedLanguageV2', detectedLanguage);            return detectedLanguage;        })();        FoxyDeal.dictionary = {            en: {                cheaper_price_found: 'Cheaper price found:',                buy_this_product_for: 'Buy this product for',                on: 'on',                this_is_the_best_price: 'This is the best price',                the_next_best_price: 'The next best price',                is_at: 'is at',                same_price: 'SAME</br>PRICE',                more: 'MORE',                compare: 'Compare',                price: 'Price',                prices: 'Prices',                coupon_for: 'Coupon for',                coupons_for: 'Coupons for',                weFoundCoupons: 'We have found coupons for this webpage!',                available: 'available',                offer_for: 'Offer for',                offers_for: 'Offers for',                save: 'Save',                shipping: 'Shipping',                freeShipping: 'Free Shipping',                problems_with_these_results: 'Problems with these results?',                feedback: 'Feedback',                feedbackMsg1: 'Oops. Please let us know if FoxyDeal is misbehaving or hasn\'t shown what you were expecting.',                feedbackMsg2: 'Submitting this form will automatically send the address of this product, which version of your browser you\'re using, and the prices found by FoxyDeal.',                feedbackMsg3: 'We\'d love it if you could give us some extra details though - so that we can help squash this bug!',                feedbackMsg4: 'Your email (optional):',                feedbackMsg5: 'No more than 1000 characters please.',                sendFeedback: 'Send Feedback',                cancel: 'Cancel',                thankyouMsg: 'Thanks for letting us know about your issue, we\'ll take a look as soon as we can.',                done: 'Done'            },        FoxyDeal.reportImpression = (function () {            var reported = false;            return function (type) {                if (reported) {                    return;                }                reported = true;                var url = 'https://transaction.foxydeal.com/aff_i?offer_id=' + type + '&aff_id=' + encodeURIComponent(FoxyDeal.partner.id.toString()) + '&aff_sub5=' + (FoxyDeal.partner.domain ? FoxyDeal.partner.domain : 'foxydeal.de');                FoxyDeal.log.info(48);                var imgEl = document.createElement('img');                imgEl.setAttribute('src', url);                imgEl.setAttribute('style', 'visibility:hidden;');                document.body.appendChild(imgEl);                $('.close').click(function () {                    FoxyDeal.mainJS.fireEvent('close', null);                });                var addAboutPage = function (url) {                    var aboutDiv = document.createElement('div');                    aboutDiv.setAttribute('class', 'about');                    var aboutA = document.createElement('a');                    aboutA.setAttribute('href', url);                    $(aboutA).text('?');                    aboutDiv.appendChild(aboutA);                    $('.close').after(aboutDiv);                    if (FoxyDeal.partner.id == '1006') {                        $(aboutA).click(function () {                            FoxyDeal.mainJS.fireEvent('conduitWhatsThis');                        });                    } else {                        aboutA.setAttribute('target', '_blank');                    }                };                var addPartnerText = function (partnerText) {                    var textDiv = document.createElement('div');                    textDiv.setAttribute('class', 'partner-text');                    $(textDiv).html(partnerText);                    $('.partner-logo').after(textDiv);                };                var addPartnerLink = function (partnerName, partnerLink, infoTxt) {                    infoTxt = infoTxt || 'Ad by ';                    var textDiv = document.createElement('div');                    textDiv.setAttribute('class', 'partner-text');                    if (!partnerLink) {                        $(textDiv).text(infoTxt + partnerName);                        $('.partner-logo').after(textDiv);                        return;                    };                    $(textDiv).text(infoTxt);                    var link = document.createElement('a');                    link.setAttribute('href', partnerLink);                    $(link).text(partnerName);                    $(textDiv).append($(link));                    $('.partner-logo').after(textDiv);                };                if (FoxyDeal.partner.id == '1002') {                    addAboutPage('https://proxtube.com/foxydeal.php');                    var partnerDiv = document.createElement('div');                    partnerDiv.setAttribute('class', 'partner-logo');                    var partnerImg = document.createElement('img');                    partnerImg.setAttribute('src', '../../partner/1002/logo.png');                    partnerImg.setAttribute('title', 'proxtube');                    partnerDiv.appendChild(partnerImg);                    $('.about').after(partnerDiv);                    addPartnerText(FoxyDeal.language == 'de' ? 'Preisvergleich von ProxTube' : 'Price comparison from ProxTube');                    document.getElementsByClassName('partner-text')[0].style.top = "-7px";                } else if (FoxyDeal.partner.id == '1052') {                    addAboutPage('http://www.foxydeal.com/about/');                    var partnerDiv = document.createElement('div');                    partnerDiv.setAttribute('class', 'partner-logo');                    $('.about').after(partnerDiv);                    addPartnerText('Ad by ' + (FoxyDeal.partner.appid || '') + ' (powered by foxydeal)');                } else if (FoxyDeal.partner.id == '1068') {                    addAboutPage('http://www.foxydeal.com/about/');                    var partnerDiv = document.createElement('div');                    partnerDiv.setAttribute('class', 'partner-logo');                    $('.about').after(partnerDiv);                    if (!FoxyDeal.partner.appid) {                        return;                    }                    addPartnerLink(FoxyDeal.partner.appid, FoxyDeal.partner.applink);                } else if (FoxyDeal.partner.id == '1006') {                    addAboutPage('#');                } else {                    addAboutPage('http://www.foxydeal.com/about/');                    if (FoxyDeal.partner.appid && FoxyDeal.partner.applink) {                        var partnerDiv = document.createElement('div');                        partnerDiv.setAttribute('class', 'partner-logo');                        $('.about').after(partnerDiv);                        addPartnerLink(FoxyDeal.partner.appid, FoxyDeal.partner.applink, 'Price comparison from ');                    } else if (FoxyDeal.partner.appid) {                        var partnerDiv = document.createElement('div');                        partnerDiv.setAttribute('class', 'partner-logo');                        $('.about').after(partnerDiv);                        addPartnerText('Price comparison from ' + (FoxyDeal.partner.appid || ''));                    }                }            };        })();        FoxyDeal.setMediaString = function (type) {            var extra = 150;            if (FoxyDeal.partner.id == '1002') {                extra = 135;            }            var message = document.getElementById("message");            var messageWidth = message ? message.offsetWidth : 0;            var logo = document.getElementsByClassName("head_symbol");            var logoWidth = (logo.length != 0) ? logo[0].offsetWidth : 0;            var firstMove = document.getElementsByClassName("first_move");            var firstMoveWidth = (firstMove.length != 0) ? firstMove[0].offsetWidth : 0;            var secondMove = document.getElementsByClassName("second_move");            var secondMoveWidth = (secondMove.length != 0) ? secondMove[0].offsetWidth : 0;            var thirdMove = document.getElementsByClassName("third_move");            var thirdMoveWidth = (thirdMove.length != 0) ? thirdMove[0].offsetWidth : 0;            var compareButton = document.getElementById("offers-button-box");            var compareButtonWidth = compareButton ? compareButton.offsetWidth : 0;            var couponsButton = document.getElementById("coupons-button-box");            var couponsButtonWidth = couponsButton ? couponsButton.offsetWidth : 0;            // the minimum that we want to show are logo, buttons for offers and coupons, info about partner, about and x buttons            var minWidth = compareButtonWidth + couponsButtonWidth + logoWidth * 2 + extra;            // first limist after we are reducing wording in topbar needs to contain logo, the whole message, buttons and about and x buttons            var firstLimit = messageWidth + logoWidth * 2 + compareButtonWidth + couponsButtonWidth + extra;            var secondLimit = secondMoveWidth + thirdMoveWidth + logoWidth * 2 + compareButtonWidth + couponsButtonWidth + extra;            var thirdLimit = logoWidth * 2 + compareButtonWidth + couponsButtonWidth + extra + thirdMoveWidth;            var couponsLimit = (couponsButton.getAttribute("style").split(": ")[1] === "block;") ? ".topbar_Content #message div{display:none;}" : ".topbar_Content #message div{display:inline;}";            var minWidth = (couponsButton.getAttribute("style").split(": ")[1] === "block;") ? minWidth : minWidth + thirdMoveWidth;            var offCoupMedia = [minWidth + "px", firstLimit + "px", secondLimit + "px", thirdLimit + "px"];            var couponsMedia = [minWidth + "px", firstLimit + "px"];            var mediaArray = (type == 'coupons') ? couponsMedia : offCoupMedia;            var offersQuery = ".topbar_Content {min-width:" + mediaArray[0] + ";}"                + "@media screen and (max-width: " + mediaArray[1] + ") {"                + ".topbar_Content .first_move strong{display:none;}"                + ".topbar_Content .second_move{display:inline-block; float: left;}"                + ".topbar_Content .third_move{display:inline;}"                + ".topbar_Content .compare_box{display:inline;}"                + ".topbar_Content .rightCorner{display:inline; float:none;}}"                + "@media screen and (max-width: " + mediaArray[2] + ") {"                + ".topbar_Content .first_move strong{display:none;}"                + ".topbar_Content #offer-message .second_move{display:none;}"                + ".topbar_Content .third_move{display:inline;}"                + ".topbar_Content .compare_box{display:inline;}"                + ".topbar_Content .rightCorner{display:inline; float:none;}}"                + "@media screen and (max-width: " + mediaArray[3] + ") {"                + ".topbar_Content .first_move strong{display:none;}"                + ".topbar_Content #offer-message .second_move{display:none;}"                + couponsLimit                + ".topbar_Content .compare_box{display:inline;}"                + ".topbar_Content .rightCorner{display:inline;}"                + "}";            var couponsQuery = ".topbar_Content {min-width:" + mediaArray[0] + ";}"                + "@media screen and (max-width: " + mediaArray[1] + ") {"                + ".topbar_Content #message{display:none;}"                + ".rightCorner .partner-text{position: relative; float:right;}}";            var mediaString = (type == 'coupons') ? couponsQuery : offersQuery;            return mediaString;        };        FoxyDeal.getOffers = function (parameters) {            FoxyDeal.log.info(49);            var hideIcon = function () {                var coupon_count = document.getElementById('coupons-icon');                coupon_count.style.display = 'none';                var coupons_div = document.getElementById('coupons-div');                coupons_div.style.display = 'none';            };            var setBar = function () {                document.getElementById('header-id').style.display = 'block';                var offer_div = document.getElementById('offer-div');                offer_div.style.display = 'block';                var offers_button_box = document.getElementById('offers-button-box');                offers_button_box.style.display = 'block';            };            var setStrings = function (offers, dictionary) {                var makeOfferString = function (offer, shopPrice) {                    var topbarString = '';                    if (offer.product_savings_percentage > 0) {                        topbarString = (FoxyDeal.partner.mobile ? '' : '<div class="first_move"><strong>' + dictionary.cheaper_price_found + ' </strong></div>') + '<div class="second_move">' + dictionary.buy_this_product_for + ' ' + '<div id="offer-link"> ' + offer.product_price_display + ' ' + dictionary.on + ' ' + offer.merchant_name + ' - </div></div>' + '<div class="third_move"><strong>' + dictionary.save.toUpperCase() + ' ' + offer.product_savings_total_display + ' </div></strong>';                    } else {                        topbarString = '<div class="first_move"><strong>' + dictionary.this_is_the_best_price + ' (' + shopPrice + '). ' + '</strong></div>' + '<div class="second_move">' + dictionary.the_next_best_price + ' (' + offer.product_price_display + ') ' + dictionary.is_at + '<div id="offer-link"> ' + offer.merchant_name + '</div></div>';                    }                    return topbarString;                };                $('#offer-message').html(makeOfferString(offers.FoundOffers.OfferList[0], parameters.GetOffers.price));                $('#offer-message').attr('href', offers.FoundOffers.OfferList[0].product_url);                $('#compare-button-text').text(dictionary.compare + " " + offers.FoundOffers.amount.toString() + " " + ((offers.FoundOffers.amount > 1) ? dictionary.prices : dictionary.price));            };            var url = 'https://' + FoxyDeal.api.domain + '/v1.5/offers';            var FoxyDealLog = function (logName) {                /*                if (!FoxyDeal.partner.unsupportedPage) {                    if (FoxyDeal.partner.id == 1054 || FoxyDeal.partner.id == 1002) {                        var imgEl = document.createElement('img');                        imgEl.setAttribute('src', 'https://client.foxydeal.com/log/' + FoxyDeal.partner.id + '/' + encodeURIComponent(logName));                        imgEl.setAttribute('style', 'visibility:hidden;');                        document.body.appendChild(imgEl);                    }                }                */            };            FoxyDealLog('offers_request');            FoxyDeal.ajax.send({                pid: FoxyDeal.partner.id,                dataType: 'json',                url: url,                type: 'post',                data: encodeURIComponent(JSON.stringify(parameters))            }, function (data, textStatus, jqXHR) {                FoxyDealLog('offers_response');                if (!(jqXHR && jqXHR.status)) {                    FoxyDeal.log.error(50);                    return;                }                if (jqXHR.status !== 200) {                    FoxyDeal.log.error(51);                    return;                }                try {                    var offers = data;                    var textResponse = data;                    if (typeof data === 'string') {                        offers = JSON.parse(data);                    } else {                        textResponse = JSON.stringify(data);                    }                    FoxyDeal.log.info(52);                    if (offers.FoundOffers && offers.FoundOffers.amount > 0) {                        FoxyDealLog('received_offers');                        $(document).ready(function () {                            FoxyDeal.log.info(65);                            FoxyDeal.reportImpression('21');                            var dictionary = FoxyDeal.dictionary[FoxyDeal.language];                            hideIcon();                            setBar();                            setStrings(offers, dictionary);                            FoxyDeal.mainJS.fireEvent('displayOffers', {                                offers: offers,                                buttonWidth: $('#compare-button').width(),                                dictionary: dictionary                            });                            var button = $("#compare-button");                            var arrow = $("#compare-arrow");                            FoxyDeal.mainJS.addEventListener('panelDisplayed', function (displayed) {                                if (displayed) {                                    button.removeClass('fd-button-normal').addClass('fd-button-pressed');                                    arrow.removeClass('compare-arrow-down').addClass('compare-arrow-up');                                } else {                                    button.removeClass('fd-button-pressed').addClass('fd-button-normal');                                    arrow.removeClass('compare-arrow-up').addClass('compare-arrow-down');                                }                            });                            $(window).resize(function () {                                FoxyDeal.mainJS.fireEvent('resize', FoxyDeal.buttonLocation());                            });                            FoxyDeal.insertCSS(FoxyDeal.setMediaString("offers"));                            $('#compare-button').click(function () {                                FoxyDeal.mainJS.fireEvent('panelShowHide', null);                            });                        });                    }                } catch (ex) {                    FoxyDeal.log.error(59);                }            });        };        FoxyDeal.displayCoupons = (function () {            var displayed = {};            return function (coupons, full) {                if (displayed.full) {                    return;                };                try {                    FoxyDeal.log.info(53);                    FoxyDeal.coupons = coupons;                    var displayFull = FoxyDeal.shouldAttempt('c_' + coupons.domain);                    var dictionary = FoxyDeal.dictionary[FoxyDeal.language];                    var couponsURL = 'http://go.foxydeal.com/' + coupons.c + '/' + coupons.pid + '/' + FoxyDeal.partner.uid;                    $('#coupons-button').attr('href', couponsURL);                    $('#coupons-button-text').text(coupons.n + ' ' + (coupons.n == 1 ? dictionary.coupon_for : dictionary.coupons_for) + ' ' + coupons.domain);                    $('#coupons-message').attr('href', couponsURL);                    $('#coupons-message>strong').text(dictionary.weFoundCoupons);                    var coupons_div = document.getElementById('coupons-div');                    coupons_div.style.display = 'block';                    var coupons_button = document.getElementById('coupons-button-box');                    coupons_button.style.display = 'block';                    var displayCoupons = function () {                        displayed.full = true;                        var coupon_count = document.getElementById('coupons-icon');                        coupon_count.style.display = 'none';                        document.getElementById('header-id').style.display = 'block';                        FoxyDeal.mainJS.fireEvent('display', null);                        FoxyDeal.insertCSS(FoxyDeal.setMediaString("coupons"));                        FoxyDeal.reportImpression('24');                        if (FoxyDeal.partner.id == '11111111111') {                            $('#coupons-button').addClass('fancybox');                            $('#coupons-button').attr('data-fancybox-type', 'iframe');                            $('#coupons-message').addClass('fancybox');                            $('#coupons-message').attr('data-fancybox-type', 'iframe');                            $(".fancybox").fancybox({                                openEffect: 'none',                                closeEffect: 'none',                                iframe: {                                    preload: false                                },                                beforeLoad: function () {                                    FoxyDeal.mainJS.fireEvent('showCouponsBox');                                },                                afterClose: function () {                                    FoxyDeal.mainJS.fireEvent('hideCouponsBox');                                }                            });                        }                    };                    var displayIcon = function () {                        if (displayed.icon) {                            return;                        };                        displayed.icon = true;                        document.getElementById('header-id').style.display = 'none';                        var coupon_count = document.getElementById('coupons-icon');                        coupon_count.style.display = 'block';                        document.getElementById('coupon-count').textContent = coupons.n;                        $('#coupons-icon').on('click', function () {                            $(this).off('click');                            displayCoupons();                        });                    };                    var size = null;                    if (displayFull) {                        displayCoupons();                    } else {                        displayIcon();                        size = {                            width: '41px',                            height: '39px'                        };                    }                    FoxyDeal.mainJS.fireEvent('display', size);                } catch (ex) {                    FoxyDeal.log.error(54);                }            };        })();        FoxyDeal.displayFeedbackForm = function (feedback) {            document.getElementById('overlay').style.visibility = 'visible';            var dictionary = FoxyDeal.dictionary[FoxyDeal.language];            $('#dialog').html('<p>' + dictionary.feedbackMsg1 + '</p><p>' + dictionary.feedbackMsg2 + '</p><p>' + dictionary.feedbackMsg3 + '</p><p>' + dictionary.feedbackMsg4 + ' <input id=\'user-email\' type=\'text\' style=\'width:250px;\'></p><p><textarea id=\'feedback-text\' style=\'width:100%;\' maxlength=\'1000\'></textarea></p><p><span style=\'float: right; font-size: 10px; margin: -6px 0 0;\'>' + dictionary.feedbackMsg5 + '</span></p>');            $('#dialog').dialog({                autoOpen: true,                width: 500,                title: dictionary.feedback,                close: function () {                    FoxyDeal.mainJS.fireEvent('hideFeedbackForm', null);                    document.getElementById('overlay').style.visibility = 'hidden';                },                buttons: [{                    text: dictionary.cancel,                    click: function () {                        $(this).dialog('close');                    }                }, {                    text: dictionary.sendFeedback,                    click: function () {                        $(this).dialog('close');                        feedback.comment = document.getElementById('feedback-text').value;                        feedback.email = document.getElementById('user-email').value;                        FoxyDeal.sendFeedBack(feedback);                    }                }]            });            $('#dialog').css('font-size', '12px');        };        FoxyDeal.sendFeedBack = function (feedback) {            FoxyDeal.log.info(55);            FoxyDeal.ajax.send({                dataType: 'json',                url: 'https://' + FoxyDeal.api.domain + '/v1.5/feedback',                type: 'post',                data: JSON.stringify(feedback)            }, function (data, textStatus, jqXHR) {                if (jqXHR && jqXHR.status) {                    if (jqXHR.status === 200) {                        FoxyDeal.log.info(56);                    } else {                        FoxyDeal.log.error(57);                    }                } else {                    FoxyDeal.log.error(58);                }            });        };        FoxyDeal.mainJS.addEventListener('showFeedbackForm', FoxyDeal.displayFeedbackForm);        FoxyDeal.uid.onAvailable(function () {            FoxyDeal.mainJS.addEventListener('displayCoupons', function (coupons) {                $(document).ready(function () {                    FoxyDeal.displayCoupons(coupons);                });            });            FoxyDeal.mainJS.addEventListener('getOffers', function (parameters) {                parameters.uid = FoxyDeal.partner.uid;                FoxyDeal.getOffers(parameters);            });            FoxyDeal.mainJS.fireEvent('ready', null);        });        $(document).ready(function () {            if (FoxyDeal.partner.id == '1001' || FoxyDeal.partner.id == '1') {                $('#coupons-button').attr('href', 'http://www.foxydeal.de/tarifvergleich/');                $('#coupons-button-text').text('Tarife vergleichen');                var coupons_button = document.getElementById('coupons-button-box');                coupons_button.style.display = 'block';            }        });    </script></head><body>    <div class="wrapper">        <div id="coupons-icon" style="display: none;">            <a href="#" style="color: #000000; text-decoration: none; background: none;">                <img id="topbar-image" src="data:image/png;base64,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" />                <div id="coupon-count">                    10                </div>            </a>        </div>        <div class="header" id="header-id" style="display: none;">            <div class="container">                <div class="header_top">                    <a href="#" class="head_symbol">                        <img src="../../images/head_symbol.png" width="65" height="57" alt="" />                    </a>                    <div class="topbar_Content">                        <div id="message">                            <div id="offer-div" class="message-div" style="display: none;">                                <a target="_blank" id="offer-message" class="message-anchor" href="http://go.foxydeal.com/50f1bf41e4b0e6d21e14348e/50ed89ece4b040a85500de4a">                                    <div class="first_move">                                        <strong>Cheaper price found:</strong>                                    </div>                                    <div class="second_move">                                        <div id="bannerDescription">                                            Buy this product for                                            <div id="offer-link">                                                $243.73 on Amazon                                                -                                            </div>                                        </div>                                    </div>                                    <div class="third_move">                                        <strong>SAVE $36.26 </strong>                                    </div>                                </a>                            </div>                            <div id="coupons-div" class="message-div" style="display: none;">                                <a id="coupons-message" class="message-anchor" href="#" target="_blank">                                    <strong>                                        We have found coupons                                        for this webpage!                                    </strong>                                </a>                            </div>                        </div>                        <div id="offers-button-box" class="compare_box" style="padding-right: 20px; display: none;">                            <a href="#" class="fd-button fd-button-normal" id="compare-button">                                <table class="button-table">                                    <tbody>                                        <tr>                                            <td id="compare-button-text" class="fd-button-text">                                                Compare 6 prices                                            </td>                                            <td>                                                <div id="compare-arrow" class="compare-arrow-down">                                                </div>                                            </td>                                        </tr>                                    </tbody>                                </table>                            </a>                        </div>                        <div id="coupons-button-box" class="compare_box" style="display: none;">                            <a href="http://go.foxydeal.com/de/733/5253f3dce4b0c10861ef0d6f" target="_blank" class="fd-button fd-button-normal" id="coupons-button">                                <div style="display: table" class="button-table">                                    <div style="display: table-row">                                        <div style="display: table-cell; vertical-align: middle;" id="coupons-button-text" class="fd-button-text">3 coupons for amazon.com</div>                                        <div style="display: table-cell; vertical-align: middle;" class="fd-button-text">                                            <div id="coupons-arrow"></div>                                        </div>                                    </div>                                </div>                            </a>                        </div>                        <div class="rightCorner" style="float: right;">                            <div class="close">                                <a href="#">X</a>                            </div>                            <div class="clear">                            </div>                        </div>                    </div>                </div>            </div>        </div>        <div id="overlay" style="visibility: hidden; position: absolute; top: 0px; left: 0px; background-color: #262626; opacity: 0.3; filter: alpha(opacity=30); width: 100%; height: 100%;">        </div>        <div id="dialog">        </div>    </div></body></html>

andy_d · November 10, 2014

I was looking to edit this post - I figured it out. It was an extension I've had installed for years that suddenly decided to add spyware. It's been removed - I liked the Feedly extension mod - I don't like developers being sneaky about the add

AdvancedSetup · November 12, 2014

So are you okay now or did you still need help looking at this?

Thanks

AdvancedSetup · February 24, 2015

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Sign In

Spyware - Foxydeal - unable to remove

Recommended Posts

andy_d

Link to post

Share on other sites

andy_d

Link to post

Share on other sites

andy_d

Link to post

Share on other sites

andy_d

Link to post

Share on other sites

AdvancedSetup

Link to post

Share on other sites

AdvancedSetup

Link to post

Share on other sites

Recently Browsing 0 members

Browse

Activity

Personal

Business

Business Modules

Partners

Learn

Start here

Type of malware/attacks

How does it get on my computer?

Scams and grifts

Support

Important Information