API tools faq
paste
Advertisement
terryp

FRST.txt pasted

terryp
May 9th, 2015
663
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 103.12 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
  2. Ran by home (administrator) on HOME-HP on 09-05-2015 13:04:40
  3. Running from C:\Users\home\Desktop
  4. Loaded Profiles: home (Available profiles: home & LogMeInRemoteUser)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 8 (Default browser: IE)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (AMD) C:\Windows\System32\atiesrxx.exe
  15. (AMD) C:\Windows\System32\atieclxx.exe
  16. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  17. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  18. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  19. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  20. (Carbonite, Inc. (www.carbonite.com)) C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe
  21. (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
  22. (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
  23. (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
  24. (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\n360.exe
  25. (Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
  26. (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
  27. (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
  28. (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
  29. (Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
  30. (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
  31. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  32. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  33. (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\n360.exe
  34. (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
  35. (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
  36. (Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
  37. (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
  38. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  39. (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
  40. (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
  41. (Google Inc.) C:\Program Files (x86)\Google\Gmail Notifier\gnotify.exe
  42. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
  43. (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe
  44. (Carbonite, Inc.) C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
  45. (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
  46. (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
  47. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  48. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  49. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  51. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  52. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  53. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  54. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  55. (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
  56. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
  57. (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe
  58. (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
  59. (Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe
  60. (Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe
  61. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\nacl64.exe
  62. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\nacl64.exe
  63. (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
  64. (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
  65. (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\conathst.exe
  66. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  67. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  68. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  69. (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
  70. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
  71. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  72. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  73. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
  74. (Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\agent.exe
  75. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  76. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  77. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  78. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  79. (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Converter 7\PDFRouter.exe
  80. (Foolish IT, LLC) C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventEventSvc.exe
  81. (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
  82. (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
  83. (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\NBCore.exe
  84.  
  85.  
  86. ==================== Registry (Whitelisted) ==================
  87.  
  88. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  89.  
  90. HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
  91. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
  92. HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
  93. HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-05-12] (Advanced Micro Devices, Inc.)
  94. HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
  95. HKLM-x32\...\Run: [] => [X]
  96. HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc)
  97. HKLM-x32\...\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] => C:\Program Files (x86)\Google\Gmail Notifier\gnotify.exe [479232 2005-07-15] (Google Inc.)
  98. HKLM-x32\...\Run: [PDF7 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Converter 7\RegistryController.exe [121120 2010-10-28] (Nuance Communications, Inc.)
  99. HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
  100. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  101. HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1686528 2012-03-27] (Wondershare)
  102. HKLM-x32\...\Run: [Nuance PDF Converter 7-reminder] => C:\Program Files (x86)\Nuance\PDF Converter 7\Ereg\Ereg.exe [333088 2010-07-05] (Nuance Communications, Inc.)
  103. HKLM-x32\...\Run: [DBAgent] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1517128 2013-10-18] (Seagate Technology LLC)
  104. HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
  105. HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
  106. HKLM-x32\...\Run: [Carbonite Backup] => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe [1056976 2014-06-27] (Carbonite, Inc.)
  107. HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [673616 2009-04-07] (SEIKO EPSON CORPORATION)
  108. HKLM Group Policy restriction on software: *.gif*.jse <====== ATTENTION
  109. HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION
  110. HKLM Group Policy restriction on software: *.rtf*.cmd <====== ATTENTION
  111. HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ATTENTION
  112. HKLM Group Policy restriction on software: *.ppt*.js <====== ATTENTION
  113. HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION
  114. HKLM Group Policy restriction on software: *.rar*.js <====== ATTENTION
  115. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ATTENTION
  116. HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION
  117. HKLM Group Policy restriction on software: *.xls*.cmd <====== ATTENTION
  118. HKLM Group Policy restriction on software: *.wav*.js <====== ATTENTION
  119. HKLM Group Policy restriction on software: *.divx*.bat <====== ATTENTION
  120. HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION
  121. HKLM Group Policy restriction on software: %appdata%\*.jse <====== ATTENTION
  122. HKLM Group Policy restriction on software: *.divx*.js <====== ATTENTION
  123. HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION
  124. HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION
  125. HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION
  126. HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION
  127. HKLM Group Policy restriction on software: *.jpeg*.js <====== ATTENTION
  128. HKLM Group Policy restriction on software: *.pptx*.bat <====== ATTENTION
  129. HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION
  130. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION
  131. HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION
  132. HKLM Group Policy restriction on software: *.avi*.bat <====== ATTENTION
  133. HKLM Group Policy restriction on software: *.zip*.js <====== ATTENTION
  134. HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION
  135. HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION
  136. HKLM Group Policy restriction on software: *.xlsx*.bat <====== ATTENTION
  137. HKLM Group Policy restriction on software: *.docx*.js <====== ATTENTION
  138. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
  139. HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION
  140. HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION
  141. HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION
  142. HKLM Group Policy restriction on software: *.rtf*.jse <====== ATTENTION
  143. HKLM Group Policy restriction on software: *.avi*.jse <====== ATTENTION
  144. HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ATTENTION
  145. HKLM Group Policy restriction on software: *.wma*.js <====== ATTENTION
  146. HKLM Group Policy restriction on software: *.wma*.bat <====== ATTENTION
  147. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ATTENTION
  148. HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION
  149. HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
  150. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ATTENTION
  151. HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION
  152. HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION
  153. HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION
  154. HKLM Group Policy restriction on software: *.pdf*.jse <====== ATTENTION
  155. HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION
  156. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION
  157. HKLM Group Policy restriction on software: %appdata%\*.bat <====== ATTENTION
  158. HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ATTENTION
  159. HKLM Group Policy restriction on software: %programdata%\*.js <====== ATTENTION
  160. HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION
  161. HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION
  162. HKLM Group Policy restriction on software: *.pdf*.cmd <====== ATTENTION
  163. HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION
  164. HKLM Group Policy restriction on software: *.bmp*.js <====== ATTENTION
  165. HKLM Group Policy restriction on software: *.mp3*.cmd <====== ATTENTION
  166. HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION
  167. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION
  168. HKLM Group Policy restriction on software: C:\Users\*.bat <====== ATTENTION
  169. HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION
  170. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
  171. HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION
  172. HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION
  173. HKLM Group Policy restriction on software: *.doc*.js <====== ATTENTION
  174. HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION
  175. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ATTENTION
  176. HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION
  177. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION
  178. HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ATTENTION
  179. HKLM Group Policy restriction on software: *.avi*.js <====== ATTENTION
  180. HKLM Group Policy restriction on software: *.png*.cmd <====== ATTENTION
  181. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION
  182. HKLM Group Policy restriction on software: *.docx*.jse <====== ATTENTION
  183. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
  184. HKLM Group Policy restriction on software: %programdata%\*.pif <====== ATTENTION
  185. HKLM Group Policy restriction on software: *.jpg*.cmd <====== ATTENTION
  186. HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION
  187. HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION
  188. HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION
  189. HKLM Group Policy restriction on software: *.doc*.jse <====== ATTENTION
  190. HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION
  191. HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION
  192. HKLM Group Policy restriction on software: *.png*.js <====== ATTENTION
  193. HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION
  194. HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION
  195. HKLM Group Policy restriction on software: *.gif*.cmd <====== ATTENTION
  196. HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION
  197. HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION
  198. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION
  199. HKLM Group Policy restriction on software: *.bmp*.bat <====== ATTENTION
  200. HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION
  201. HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ATTENTION
  202. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
  203. HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION
  204. HKLM Group Policy restriction on software: *.wav*.cmd <====== ATTENTION
  205. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
  206. HKLM Group Policy restriction on software: *.7z*.jse <====== ATTENTION
  207. HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION
  208. HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION
  209. HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION
  210. HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION
  211. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
  212. HKLM Group Policy restriction on software: *.gif*.bat <====== ATTENTION
  213. HKLM Group Policy restriction on software: *.docx*.bat <====== ATTENTION
  214. HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION
  215. HKLM Group Policy restriction on software: %programdata%\*.exe <====== ATTENTION
  216. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION
  217. HKLM Group Policy restriction on software: *.pub*.cmd <====== ATTENTION
  218. HKLM Group Policy restriction on software: *.wmv*.js <====== ATTENTION
  219. HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION
  220. HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION
  221. HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION
  222. HKLM Group Policy restriction on software: *.mp4*.js <====== ATTENTION
  223. HKLM Group Policy restriction on software: *.zip*.bat <====== ATTENTION
  224. HKLM Group Policy restriction on software: *.wav*.bat <====== ATTENTION
  225. HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION
  226. HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION
  227. HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION
  228. HKLM Group Policy restriction on software: *.docx*.cmd <====== ATTENTION
  229. HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ATTENTION
  230. HKLM Group Policy restriction on software: *.divx*.jse <====== ATTENTION
  231. HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION
  232. HKLM Group Policy restriction on software: *.pdf*.bat <====== ATTENTION
  233. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ATTENTION
  234. HKLM Group Policy restriction on software: *.wav*.jse <====== ATTENTION
  235. HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION
  236. HKLM Group Policy restriction on software: *.txt*.cmd <====== ATTENTION
  237. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ATTENTION
  238. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
  239. HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION
  240. HKLM Group Policy restriction on software: *.doc*.bat <====== ATTENTION
  241. HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION
  242. HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION
  243. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ATTENTION
  244. HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION
  245. HKLM Group Policy restriction on software: *.rar*.bat <====== ATTENTION
  246. HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION
  247. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION
  248. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION
  249. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ATTENTION
  250. HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION
  251. HKLM Group Policy restriction on software: *.xls*.js <====== ATTENTION
  252. HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION
  253. HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION
  254. HKLM Group Policy restriction on software: *.png*.jse <====== ATTENTION
  255. HKLM Group Policy restriction on software: *.mp3*.bat <====== ATTENTION
  256. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
  257. HKLM Group Policy restriction on software: *.mp4*.cmd <====== ATTENTION
  258. HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ATTENTION
  259. HKLM Group Policy restriction on software: *.rar*.cmd <====== ATTENTION
  260. HKLM Group Policy restriction on software: ** <====== ATTENTION
  261. HKLM Group Policy restriction on software: *.ppt*.cmd <====== ATTENTION
  262. HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION
  263. HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION
  264. HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION
  265. HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ATTENTION
  266. HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION
  267. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ATTENTION
  268. HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION
  269. HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION
  270. HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION
  271. HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION
  272. HKLM Group Policy restriction on software: *.mp4*.jse <====== ATTENTION
  273. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION
  274. HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION
  275. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION
  276. HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION
  277. HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION
  278. HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION
  279. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
  280. HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION
  281. HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION
  282. HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION
  283. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION
  284. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ATTENTION
  285. HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION
  286. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ATTENTION
  287. HKLM Group Policy restriction on software: *.ppt*.jse <====== ATTENTION
  288. HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION
  289. HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ATTENTION
  290. HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION
  291. HKLM Group Policy restriction on software: *.bmp*.cmd <====== ATTENTION
  292. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION
  293. HKLM Group Policy restriction on software: *.bmp*.jse <====== ATTENTION
  294. HKLM Group Policy restriction on software: %userprofile%\*.js <====== ATTENTION
  295. HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION
  296. HKLM Group Policy restriction on software: *.xls*.bat <====== ATTENTION
  297. HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION
  298. HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION
  299. HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ATTENTION
  300. HKLM Group Policy restriction on software: *.pub*.jse <====== ATTENTION
  301. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION
  302. HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION
  303. HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION
  304. HKLM Group Policy restriction on software: C:\Users\*.js <====== ATTENTION
  305. HKLM Group Policy restriction on software: *.txt*.jse <====== ATTENTION
  306. HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ATTENTION
  307. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
  308. HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ATTENTION
  309. HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION
  310. HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION
  311. HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ATTENTION
  312. HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION
  313. HKLM Group Policy restriction on software: *.doc*.cmd <====== ATTENTION
  314. HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION
  315. HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION
  316. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ATTENTION
  317. HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION
  318. HKLM Group Policy restriction on software: *.ppt*.bat <====== ATTENTION
  319. HKLM Group Policy restriction on software: *.jpeg*.jse <====== ATTENTION
  320. HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION
  321. HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION
  322. HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION
  323. HKLM Group Policy restriction on software: *.xls*.jse <====== ATTENTION
  324. HKLM Group Policy restriction on software: *.avi*.cmd <====== ATTENTION
  325. HKLM Group Policy restriction on software: *.wmv*.cmd <====== ATTENTION
  326. HKLM Group Policy restriction on software: *.wma*.cmd <====== ATTENTION
  327. HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION
  328. HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION
  329. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ATTENTION
  330. HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION
  331. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION
  332. HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION
  333. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ATTENTION
  334. HKLM Group Policy restriction on software: *.wmv*.jse <====== ATTENTION
  335. HKLM Group Policy restriction on software: *.jpg*.bat <====== ATTENTION
  336. HKLM Group Policy restriction on software: *.7z*.bat <====== ATTENTION
  337. HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ATTENTION
  338. HKLM Group Policy restriction on software: *.rtf*.bat <====== ATTENTION
  339. HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION
  340. HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ATTENTION
  341. HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION
  342. HKLM Group Policy restriction on software: *.pdf*.js <====== ATTENTION
  343. HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION
  344. HKLM Group Policy restriction on software: *.pptx*.jse <====== ATTENTION
  345. HKLM Group Policy restriction on software: *.zip*.cmd <====== ATTENTION
  346. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ATTENTION
  347. HKLM Group Policy restriction on software: *.jpg*.js <====== ATTENTION
  348. HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION
  349. HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION
  350. HKLM Group Policy restriction on software: *.rar*.jse <====== ATTENTION
  351. HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION
  352. HKLM Group Policy restriction on software: *.pub*.bat <====== ATTENTION
  353. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
  354. HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION
  355. HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION
  356. HKLM Group Policy restriction on software: *.wmv*.bat <====== ATTENTION
  357. HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION
  358. HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION
  359. HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION
  360. HKLM Group Policy restriction on software: *.zip*.jse <====== ATTENTION
  361. HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ATTENTION
  362. HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION
  363. HKLM Group Policy restriction on software: *.pptx*.cmd <====== ATTENTION
  364. HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION
  365. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
  366. HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ATTENTION
  367. HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION
  368. HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION
  369. HKLM Group Policy restriction on software: *.mp3*.js <====== ATTENTION
  370. HKLM Group Policy restriction on software: *.divx*.cmd <====== ATTENTION
  371. HKLM Group Policy restriction on software: *.jpg*.jse <====== ATTENTION
  372. HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ATTENTION
  373. HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION
  374. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ATTENTION
  375. HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ATTENTION
  376. HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION
  377. HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION
  378. HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION
  379. HKLM Group Policy restriction on software: *.pub*.js <====== ATTENTION
  380. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ATTENTION
  381. HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION
  382. HKLM Group Policy restriction on software: %programdata%\*.scr <====== ATTENTION
  383. HKLM Group Policy restriction on software: *.txt*.bat <====== ATTENTION
  384. HKLM Group Policy restriction on software: *.txt*.js <====== ATTENTION
  385. HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION
  386. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
  387. HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ATTENTION
  388. HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION
  389. HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION
  390. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ATTENTION
  391. HKLM Group Policy restriction on software: *.mp3*.jse <====== ATTENTION
  392. HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION
  393. HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION
  394. HKLM Group Policy restriction on software: *.rtf*.js <====== ATTENTION
  395. HKLM Group Policy restriction on software: *.wma*.jse <====== ATTENTION
  396. HKLM Group Policy restriction on software: C:\Users\*.jse <====== ATTENTION
  397. HKLM Group Policy restriction on software: *.pptx*.js <====== ATTENTION
  398. HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION
  399. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
  400. HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION
  401. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
  402. HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION
  403. HKLM Group Policy restriction on software: *.gif*.js <====== ATTENTION
  404. HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ATTENTION
  405. HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION
  406. HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ATTENTION
  407. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION
  408. HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION
  409. HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION
  410. HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION
  411. HKLM Group Policy restriction on software: *.mp4*.bat <====== ATTENTION
  412. HKLM Group Policy restriction on software: *.jpeg*.bat <====== ATTENTION
  413. HKLM Group Policy restriction on software: *.7z*.cmd <====== ATTENTION
  414. HKLM Group Policy restriction on software: %programdata%\*.com <====== ATTENTION
  415. HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION
  416. HKLM Group Policy restriction on software: *.png*.bat <====== ATTENTION
  417. HKLM Group Policy restriction on software: %programdata%\*.jse <====== ATTENTION
  418. HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
  419. HKLM Group Policy restriction on software: *.7z*.js <====== ATTENTION
  420. HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION
  421. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION
  422. HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION
  423. HKLM Group Policy restriction on software: *.xlsx*.js <====== ATTENTION
  424. HKLM Group Policy restriction on software: %programdata%\*.bat <====== ATTENTION
  425. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION
  426. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION
  427. HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION
  428. HKLM Group Policy restriction on software: %appdata%\*.js <====== ATTENTION
  429. HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION
  430. HKLM Group Policy restriction on software: *.xlsx*.jse <====== ATTENTION
  431. HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ATTENTION
  432. Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
  433. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
  434. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Run: [CAHeadless] => C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe
  435. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [122984 2013-10-18] (Seagate Technology LLC)
  436. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Run: [GoogleChromeAutoLaunch_5C1FD3B428FF226D1BCB0DD9D605A11B] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-27] (Google Inc.)
  437. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-08] (Apple Inc.)
  438. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\MountPoints2: {12a6492a-acae-11e1-8d93-2c27d7283457} - G:\TL-Bootstrap.exe
  439. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\MountPoints2: {12a64a8f-acae-11e1-8d93-2c27d7283457} - G:\TL-Bootstrap.exe
  440. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\MountPoints2: {33541941-db0e-11e1-b91e-2c27d7283457} - G:\LaunchU3.exe -a
  441. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\MountPoints2: {95526b41-bfe1-11e3-9fab-2c27d7283457} - G:\TL-Bootstrap.exe
  442. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\MountPoints2: {f78d2a72-6f39-11e4-873b-2c27d7283457} - G:\VZW_Software_upgrade_assistant.exe
  443. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-06-26]
  444. ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
  445. SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
  446. SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
  447. ShellIconOverlayIdentifiers: [Carbonite.Green] -> {95A27763-F62A-4114-9072-E81D87DE3B68} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  448. ShellIconOverlayIdentifiers: [Carbonite.Partial] -> {E300CD91-100F-4E67-9AF3-1384A6124015} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  449. ShellIconOverlayIdentifiers: [Carbonite.Yellow] -> {5E529433-B50E-4bef-A63B-16A6B71B071A} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  450. ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
  451. ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\21.7.0.11\buShell.dll [2015-03-06] (Symantec Corporation)
  452. ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\21.7.0.11\buShell.dll [2015-03-06] (Symantec Corporation)
  453. ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\21.7.0.11\buShell.dll [2015-03-06] (Symantec Corporation)
  454. ShellIconOverlayIdentifiers: [{6238B220-1311-4627-B3DC-55736E5BA95F}] -> {6238B220-1311-4627-B3DC-55736E5BA95F} => C:\Windows\system32\iMobileDisk.dll [2012-05-11] ()
  455. ShellIconOverlayIdentifiers-x32: [Carbonite.Green] -> {95A27763-F62A-4114-9072-E81D87DE3B68} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  456. ShellIconOverlayIdentifiers-x32: [Carbonite.Partial] -> {E300CD91-100F-4E67-9AF3-1384A6124015} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  457. ShellIconOverlayIdentifiers-x32: [Carbonite.Yellow] -> {5E529433-B50E-4bef-A63B-16A6B71B071A} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
  458. ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
  459. ShellIconOverlayIdentifiers-x32: [{6238B220-1311-4627-B3DC-55736E5BA95F}] -> {6238B220-1311-4627-B3DC-55736E5BA95F} => C:\Windows\SysWow64\iMobileDisk.dll [2012-05-11] ()
  460.  
  461. ==================== Internet (Whitelisted) ====================
  462.  
  463. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  464.  
  465. HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/hpdsk/1
  466. SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
  467. SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
  468. SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
  469. SearchScopes: HKLM -> {522055EF-C496-444D-9574-B78AE8C3575D} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  470. SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
  471. SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
  472. SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
  473. SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
  474. SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
  475. SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
  476. SearchScopes: HKLM-x32 -> {522055EF-C496-444D-9574-B78AE8C3575D} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  477. SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
  478. SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
  479. SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
  480. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
  481. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
  482. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {522055EF-C496-444D-9574-B78AE8C3575D} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
  483. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
  484. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=US&ver=21&locale=en_US&gct=kwd&qsrc=2869
  485. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
  486. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
  487. SearchScopes: HKU\S-1-5-21-2435640776-2516259060-3705996352-1000 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
  488. BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  489. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
  490. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  491. BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
  492. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  493. BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
  494. BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc.)
  495. BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.)
  496. BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  497. BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-04] (Symantec Corporation)
  498. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-06] (Oracle Corporation)
  499. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
  500. BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-08-26] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
  501. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  502. BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
  503. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  504. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-06] (Oracle Corporation)
  505. BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
  506. BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28] (Yahoo! Inc)
  507. BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.)
  508. Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  509. Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc.)
  510. Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  511. DPF: HKLM {414FB93D-DEDD-4FEF-AD7F-167992EBDB52} https://portal.abanet.org/SNX/CSHELL/extender.cab
  512. DPF: HKLM-x32 {414FB93D-DEDD-4FEF-AD7F-167992EBDB52} https://portal.abanet.org//SNX/CSHELL/extender.cab
  513. DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://intercall.webex.com/client/WBXclient-T27L10NSP32EP5-14362/webex/ieatgpc1.cab
  514. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  515. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  516. Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-03-26] (Microsoft Corporation)
  517. Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-03-26] (Microsoft Corporation)
  518. Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-03-26] (Microsoft Corporation)
  519. Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-03-26] (Microsoft Corporation)
  520. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  521. Tcpip\..\Interfaces\{0DA51BD3-300D-4BAF-BF5B-7569D601BC0C}: [NameServer] 8.8.8.8
  522.  
  523. FireFox:
  524. ========
  525. FF ProfilePath: C:\Users\home\AppData\Roaming\Mozilla\Firefox\Profiles\phepkpx7.default
  526. FF SelectedSearchEngine: Norton Safe Search
  527. FF Homepage: https://accounts.google.com/servicelogin?service=mail&passive=true&rm=false&continue=hxxp://mail.google.com/mail/&scc=1&ltmpl=default&ltmplcache=2
  528. FF Keyword.URL: hxxp://nortonsafe.search.ask.com/web?o=APN10506&gct=kwd&qsrc=2869&l=dis&prt=360&chn=retail&geo=US&ver=20&q=
  529. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
  530. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  531. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  532. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  533. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
  534. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-05-06] ()
  535. FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
  536. FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-06] (Oracle Corporation)
  537. FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-06] (Oracle Corporation)
  538. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  539. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  540. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  541. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  542. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
  543. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
  544. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
  545. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
  546. FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] ()
  547. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
  548. FF Plugin HKU\S-1-5-21-2435640776-2516259060-3705996352-1000: @hulu.com/Hulu Desktop -> C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll [2010-04-09] (Hulu LLC)
  549. FF SearchPlugin: C:\Users\home\AppData\Roaming\Mozilla\Firefox\Profiles\phepkpx7.default\searchplugins\safesearch.xml [2013-03-04]
  550. FF Extension: Super Video Downloader - C:\Users\home\AppData\Roaming\Mozilla\Firefox\Profiles\phepkpx7.default\Extensions\none@allvideodownloader.com [2015-05-04]
  551. FF Extension: Private Tab - C:\Users\home\AppData\Roaming\Mozilla\Firefox\Profiles\phepkpx7.default\Extensions\privateTab@infocatcher.xpi [2013-05-15]
  552. FF Extension: Video DownloadHelper - C:\Users\home\AppData\Roaming\Mozilla\Firefox\Profiles\phepkpx7.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-15]
  553. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-26]
  554. FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-26]
  555. FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  556. FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.2.0.38\coFFPlgn
  557. FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.2.0.38\coFFPlgn [2015-05-05]
  558. FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
  559. FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-06-26]
  560. FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
  561. FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-04-02]
  562. FF HKU\S-1-5-21-2435640776-2516259060-3705996352-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
  563.  
  564. Chrome:
  565. =======
  566. CHR HomePage: Default ->
  567. CHR StartupUrls: Default -> "hxxp://www.google.com/"
  568. CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
  569. CHR Profile: C:\Users\home\AppData\Local\Google\Chrome\User Data\Default
  570. CHR Extension: (Google Slides) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-13]
  571. CHR Extension: (Facebook Full-size Profile Pictures) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\agcgdkfpobnjbhhmmelbojdakpehniof [2015-04-02]
  572. CHR Extension: (Google Docs) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-13]
  573. CHR Extension: (That is Worth) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\apcjfffnnlfkhfilnooghekpobiadgmd [2014-09-13]
  574. CHR Extension: (Google Drive) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-13]
  575. CHR Extension: (YouTube) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-13]
  576. CHR Extension: (Adblock Plus) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-13]
  577. CHR Extension: (Google Search) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-13]
  578. CHR Extension: (Logitech Smooth Scrolling) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-04-02]
  579. CHR Extension: (Gmail Offline) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-09-13]
  580. CHR Extension: (Dashlane) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2014-09-26]
  581. CHR Extension: (Full Page Screen Capture) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2015-03-25]
  582. CHR Extension: (Google Sheets) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-13]
  583. CHR Extension: (The Camelizer) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2014-09-13]
  584. CHR Extension: (Bookmark Manager) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
  585. CHR Extension: (Referer Control) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2015-04-21]
  586. CHR Extension: (Norton Identity Safe) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-13]
  587. CHR Extension: (BeFrugal.com Add-On) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdcneeneoifbeenbbnjodcflhdbaggp [2014-09-13]
  588. CHR Extension: (Chrome Hotword Shared Module) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-08]
  589. CHR Extension: (Skype Click to Call) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-09-13]
  590. CHR Extension: (Norton Security Toolbar) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-09-13]
  591. CHR Extension: (Ghostery) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-03-05]
  592. CHR Extension: (Norton Safe) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmgcfemagnogdodbambjhdcmfcpicngl [2014-09-13]
  593. CHR Extension: (Google Wallet) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-13]
  594. CHR Extension: (Gmail) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-13]
  595. CHR Extension: (Privacy Badger) - C:\Users\home\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2014-09-13]
  596. CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
  597. CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-20]
  598. CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
  599. CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
  600. CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-20]
  601.  
  602. ==================== Services (Whitelisted) =================
  603.  
  604. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  605.  
  606. R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)
  607. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  608. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  609. R2 CryptoPreventEventSvc; C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventEventSvc.exe [363696 2015-04-10] (Foolish IT, LLC)
  610. R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
  611. R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed]
  612. R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
  613. R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-23] (Hewlett-Packard Co.) [File not signed]
  614. R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [376144 2013-12-12] (LogMeIn, Inc.)
  615. S4 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [226640 2013-12-12] (LogMeIn, Inc.)
  616. S4 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2013-04-30] (LogMeIn, Inc.)
  617. R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\N360.exe [265000 2015-03-07] (Symantec Corporation)
  618. R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-02-18] (Nero AG)
  619. S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
  620. S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG)
  621. S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [37176 2014-10-29] (The OpenVPN Project)
  622. R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc)
  623. R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
  624. R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
  625. S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
  626. R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2013-10-18] (Seagate Technology LLC)
  627. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  628. S2 NOBU; No ImagePath
  629. S2 PCCUJobMgr; No ImagePath
  630.  
  631. ==================== Drivers (Whitelisted) ====================
  632.  
  633. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  634.  
  635. R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.2.0.38\Definitions\BASHDefs\20150501.001\BHDrvx64.sys [1639128 2015-05-01] (Symantec Corporation)
  636. R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [352144 2012-04-09] (EldoS Corporation)
  637. R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1507000.00B\ccSetx64.sys [162392 2014-02-24] (Symantec Corporation)
  638. R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-16] (Symantec Corporation)
  639. R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
  640. S3 FreeOTFE; C:\Windows\System32\FreeOTFE.sys [38512 2010-02-07] (Sarah Dean) [File not signed]
  641. S3 FreeOTFECypherAES_ltc; C:\Windows\System32\FreeOTFECypherAES_ltc.sys [50800 2010-02-07] (Sarah Dean) [File not signed]
  642. S3 FreeOTFECypherBlowfish; C:\Windows\System32\FreeOTFECypherBlowfish.sys [27760 2010-02-07] (Sarah Dean) [File not signed]
  643. S3 FreeOTFECypherCAST5; C:\Windows\System32\FreeOTFECypherCAST5.sys [34928 2010-02-07] (Sarah Dean) [File not signed]
  644. S3 FreeOTFECypherCAST6_Gladman; C:\Windows\System32\FreeOTFECypherCAST6_Gladman.sys [34928 2010-02-07] (Sarah Dean) [File not signed]
  645. S3 FreeOTFECypherDES; C:\Windows\System32\FreeOTFECypherDES.sys [60016 2010-02-07] (Sarah Dean) [File not signed]
  646. S3 FreeOTFECypherMARS_Gladman; C:\Windows\System32\FreeOTFECypherMARS_Gladman.sys [30832 2010-02-07] (Sarah Dean) [File not signed]
  647. S3 FreeOTFECypherRC6_ltc; C:\Windows\System32\FreeOTFECypherRC6_ltc.sys [29296 2010-02-07] (Sarah Dean) [File not signed]
  648. S3 FreeOTFECypherSerpent_Gladman; C:\Windows\System32\FreeOTFECypherSerpent_Gladman.sys [35952 2010-02-07] (Sarah Dean) [File not signed]
  649. S3 FreeOTFECypherTwofish_ltc; C:\Windows\System32\FreeOTFECypherTwofish_ltc.sys [35440 2010-02-07] (Sarah Dean) [File not signed]
  650. S3 FreeOTFEHashMD; C:\Windows\System32\FreeOTFEHashMD.sys [22640 2010-02-07] (Sarah Dean) [File not signed]
  651. S3 FreeOTFEHashRIPEMD; C:\Windows\System32\FreeOTFEHashRIPEMD.sys [38512 2010-02-07] (Sarah Dean) [File not signed]
  652. S3 FreeOTFEHashSHA; C:\Windows\System32\FreeOTFEHashSHA.sys [29296 2010-02-07] (Sarah Dean) [File not signed]
  653. S3 FreeOTFEHashTiger; C:\Windows\System32\FreeOTFEHashTiger.sys [26224 2010-02-07] (Sarah Dean) [File not signed]
  654. S3 FreeOTFEHashWhirlpool; C:\Windows\System32\FreeOTFEHashWhirlpool.sys [34928 2010-02-07] (Sarah Dean) [File not signed]
  655. R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.2.0.38\Definitions\IPSDefs\20150508.001\IDSvia64.sys [671448 2015-03-27] (Symantec Corporation)
  656. R2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [16056 2013-04-30] (LogMeIn, Inc.)
  657. S4 LMIRfsClientNP; No ImagePath
  658. S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2015-05-01] (Malwarebytes Corporation)
  659. R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.2.0.38\Definitions\VirusDefs\20150508.016\ENG64.SYS [129752 2015-04-29] (Symantec Corporation)
  660. R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.2.0.38\Definitions\VirusDefs\20150508.016\EX64.SYS [2137304 2015-04-29] (Symantec Corporation)
  661. R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
  662. R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
  663. R1 SafDskNT; C:\Windows\system32\drivers\SAFDSKNT.SYS [76112 2009-12-07] (PC Dynamics, Inc.)
  664. R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1507000.00B\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
  665. R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1507000.00B\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
  666. R0 SymDS; C:\Windows\System32\drivers\N360x64\1507000.00B\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation)
  667. R0 SymEFA; C:\Windows\System32\drivers\N360x64\1507000.00B\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
  668. R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-29] (Symantec Corporation)
  669. R1 SymIRON; C:\Windows\system32\drivers\N360x64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
  670. R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1507000.00B\SYMNETS.SYS [593112 2014-02-17] (Symantec Corporation)
  671. R3 tapnhp6; C:\Windows\System32\DRIVERS\tapnhp6.sys [41560 2013-03-05] (Symantec Corporation)
  672.  
  673. ==================== NetSvcs (Whitelisted) ===================
  674.  
  675. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  676.  
  677.  
  678. ==================== One Month Created Files and Folders ========
  679.  
  680. (If an entry is included in the fixlist, the file\folder will be moved.)
  681.  
  682. 2015-05-09 13:04 - 2015-05-09 13:05 - 00068035 _____ () C:\Users\home\Desktop\FRST.txt
  683. 2015-05-09 13:04 - 2015-05-09 13:04 - 00000000 ____D () C:\FRST
  684. 2015-05-09 10:50 - 2015-05-09 10:51 - 02102784 _____ (Farbar) C:\Users\home\Desktop\FRST64.exe
  685. 2015-05-07 15:50 - 2015-05-07 15:50 - 00132102 _____ () C:\Users\home\Desktop\Backup of FINALIron Tech Lawyer Handout Spring 2015.wbk
  686. 2015-05-05 14:46 - 2015-05-05 14:46 - 06356992 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatAx-9.5.0-win32.dll
  687. 2015-05-05 14:45 - 2015-05-05 14:45 - 00004134 _____ () C:\Windows\System32\Tasks\CryptoPrevent Update
  688. 2015-05-05 14:45 - 2015-05-05 14:45 - 00000039 _____ () C:\Users\Public\Documents\CryptoPrevent Premium Product Key.txt
  689. 2015-05-05 14:43 - 2015-05-05 14:43 - 00053248 _____ () C:\Windows\SysWOW64\zlib.dll
  690. 2015-05-05 14:42 - 2015-05-05 14:42 - 00001218 _____ () C:\Users\Public\Desktop\CryptoPrevent.lnk
  691. 2015-05-05 14:42 - 2015-05-05 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT
  692. 2015-05-05 14:42 - 2015-05-05 14:42 - 00000000 ____D () C:\ProgramData\Foolish IT
  693. 2015-05-05 14:42 - 2015-05-05 14:42 - 00000000 ____D () C:\Program Files (x86)\Foolish IT
  694. 2015-05-05 14:41 - 2015-05-05 14:41 - 00972464 _____ (Foolish IT LLC ) C:\Users\home\Downloads\CryptoPreventSetup (1).exe
  695. 2015-05-05 14:40 - 2015-05-05 14:41 - 00972464 _____ (Foolish IT LLC ) C:\Users\home\Downloads\CryptoPreventSetup.exe
  696. 2015-04-30 18:44 - 2015-04-30 20:24 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  697. 2015-04-30 18:41 - 2015-04-30 20:24 - 00000000 ____D () C:\Users\home\Desktop\mbar
  698. 2015-04-30 18:40 - 2015-04-30 18:41 - 16502728 _____ (Malwarebytes Corp.) C:\Users\home\Downloads\mbar-1.09.1.1004.exe
  699. 2015-04-29 12:11 - 2015-04-29 12:11 - 00044691 _____ () C:\Users\home\Documents\Backup of MOZILO Countrywide.wbk
  700. 2015-04-27 09:21 - 2015-04-27 09:21 - 00001415 _____ () C:\Users\home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
  701. 2015-04-27 08:59 - 2015-03-26 23:25 - 01540096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  702. 2015-04-27 08:59 - 2015-03-26 23:25 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  703. 2015-04-27 08:59 - 2015-03-26 23:25 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
  704. 2015-04-27 08:59 - 2015-03-26 23:25 - 00610816 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  705. 2015-04-27 08:59 - 2015-03-26 23:25 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
  706. 2015-04-27 08:59 - 2015-03-26 23:24 - 12298752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  707. 2015-04-27 08:59 - 2015-03-26 23:24 - 09064448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  708. 2015-04-27 08:59 - 2015-03-26 23:24 - 02469888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  709. 2015-04-27 08:59 - 2015-03-26 23:24 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  710. 2015-04-27 08:59 - 2015-03-26 23:24 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  711. 2015-04-27 08:59 - 2015-03-26 23:24 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  712. 2015-04-27 08:59 - 2015-03-26 23:24 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  713. 2015-04-27 08:59 - 2015-03-26 23:24 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
  714. 2015-04-27 08:59 - 2015-03-26 23:24 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  715. 2015-04-27 08:59 - 2015-03-26 23:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  716. 2015-04-27 08:59 - 2015-03-26 23:24 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
  717. 2015-04-27 08:59 - 2015-03-26 23:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  718. 2015-04-27 08:59 - 2015-03-26 23:24 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
  719. 2015-04-27 08:59 - 2015-03-26 23:24 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
  720. 2015-04-27 08:59 - 2015-03-26 23:23 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  721. 2015-04-27 08:59 - 2015-03-26 23:23 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  722. 2015-04-27 08:59 - 2015-03-26 23:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
  723. 2015-04-27 08:59 - 2015-03-26 23:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
  724. 2015-04-27 08:59 - 2015-03-26 23:04 - 06030848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  725. 2015-04-27 08:59 - 2015-03-26 23:04 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  726. 2015-04-27 08:59 - 2015-03-26 23:04 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  727. 2015-04-27 08:59 - 2015-03-26 23:04 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  728. 2015-04-27 08:59 - 2015-03-26 23:04 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
  729. 2015-04-27 08:59 - 2015-03-26 23:04 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  730. 2015-04-27 08:59 - 2015-03-26 23:04 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
  731. 2015-04-27 08:59 - 2015-03-26 23:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  732. 2015-04-27 08:59 - 2015-03-26 23:04 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
  733. 2015-04-27 08:59 - 2015-03-26 23:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  734. 2015-04-27 08:59 - 2015-03-26 23:04 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
  735. 2015-04-27 08:59 - 2015-03-26 23:03 - 11026944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  736. 2015-04-27 08:59 - 2015-03-26 23:03 - 02087936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  737. 2015-04-27 08:59 - 2015-03-26 23:03 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  738. 2015-04-27 08:59 - 2015-03-26 23:03 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  739. 2015-04-27 08:59 - 2015-03-26 23:03 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  740. 2015-04-27 08:59 - 2015-03-26 23:03 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
  741. 2015-04-27 08:59 - 2015-03-26 23:03 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  742. 2015-04-27 08:59 - 2015-03-26 23:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
  743. 2015-04-27 08:59 - 2015-03-26 23:02 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  744. 2015-04-27 08:59 - 2015-03-26 23:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  745. 2015-04-27 08:59 - 2015-03-26 23:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
  746. 2015-04-27 08:59 - 2015-03-26 23:02 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
  747. 2015-04-27 08:59 - 2015-03-26 22:46 - 00482816 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  748. 2015-04-27 08:59 - 2015-03-26 22:33 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  749. 2015-04-27 08:59 - 2015-03-26 22:22 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  750. 2015-04-27 08:59 - 2015-03-26 22:14 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  751. 2015-04-26 12:02 - 2015-04-26 12:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  752. 2015-04-25 11:54 - 2015-04-25 11:54 - 00546464 _____ () C:\Users\home\Downloads\Autoruns.zip
  753. 2015-04-25 11:43 - 2015-04-25 11:43 - 00671904 _____ (Sysinternals - www.sysinternals.com) C:\Users\home\Downloads\autoruns (2).exe
  754. 2015-04-25 11:43 - 2015-04-25 11:43 - 00671904 _____ (Sysinternals - www.sysinternals.com) C:\Users\home\Downloads\autoruns (1).exe
  755. 2015-04-25 11:42 - 2015-04-25 11:43 - 00671904 _____ (Sysinternals - www.sysinternals.com) C:\Users\home\Downloads\autoruns.exe
  756. 2015-04-21 15:42 - 2015-04-21 15:42 - 00041734 _____ () C:\Users\home\Downloads\Legal Rebels '15.xlsx
  757. 2015-04-21 10:40 - 2015-04-21 10:40 - 00858266 _____ () C:\Users\home\Downloads\followuponfdaproposaltoallowgenericdrugcompaniesto.zip
  758. 2015-04-16 04:04 - 2015-04-16 04:04 - 00000000 ____D () C:\Windows\system32\appraiser
  759. 2015-04-15 09:11 - 2015-03-24 23:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  760. 2015-04-15 09:11 - 2015-03-24 23:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  761. 2015-04-15 09:11 - 2015-03-24 23:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  762. 2015-04-15 09:11 - 2015-03-24 23:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  763. 2015-04-15 09:11 - 2015-03-24 23:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  764. 2015-04-15 09:11 - 2015-03-24 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
  765. 2015-04-15 09:11 - 2015-03-24 23:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  766. 2015-04-15 09:11 - 2015-03-24 23:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  767. 2015-04-15 09:11 - 2015-03-24 23:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  768. 2015-04-15 09:11 - 2015-03-24 23:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  769. 2015-04-15 09:11 - 2015-03-24 23:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
  770. 2015-04-15 09:11 - 2015-03-24 23:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  771. 2015-04-15 09:11 - 2015-03-24 23:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  772. 2015-04-15 09:11 - 2015-03-24 23:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  773. 2015-04-15 09:11 - 2015-03-24 23:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  774. 2015-04-15 09:11 - 2015-03-24 23:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
  775. 2015-04-15 09:11 - 2015-03-22 23:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
  776. 2015-04-15 09:11 - 2015-03-22 23:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  777. 2015-04-15 09:11 - 2015-03-22 23:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  778. 2015-04-15 09:11 - 2015-03-22 23:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  779. 2015-04-15 09:11 - 2015-03-22 23:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  780. 2015-04-15 09:11 - 2015-03-22 23:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
  781. 2015-04-15 09:11 - 2015-03-22 23:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  782. 2015-04-15 09:11 - 2015-03-22 23:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  783. 2015-04-15 09:11 - 2015-03-05 01:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  784. 2015-04-15 09:11 - 2015-03-05 00:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  785. 2015-04-15 09:11 - 2015-01-27 19:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
  786. 2015-04-15 09:10 - 2015-03-17 01:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  787. 2015-04-15 09:10 - 2015-03-17 01:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  788. 2015-04-15 09:10 - 2015-03-17 01:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  789. 2015-04-15 09:10 - 2015-03-17 01:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  790. 2015-04-15 09:10 - 2015-03-17 01:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  791. 2015-04-15 09:10 - 2015-03-17 01:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  792. 2015-04-15 09:10 - 2015-03-17 01:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  793. 2015-04-15 09:10 - 2015-03-17 01:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  794. 2015-04-15 09:10 - 2015-03-17 01:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  795. 2015-04-15 09:10 - 2015-03-17 01:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  796. 2015-04-15 09:10 - 2015-03-17 01:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  797. 2015-04-15 09:10 - 2015-03-17 01:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  798. 2015-04-15 09:10 - 2015-03-17 01:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  799. 2015-04-15 09:10 - 2015-03-17 01:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  800. 2015-04-15 09:10 - 2015-03-17 01:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  801. 2015-04-15 09:10 - 2015-03-17 01:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  802. 2015-04-15 09:10 - 2015-03-17 01:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  803. 2015-04-15 09:10 - 2015-03-17 01:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  804. 2015-04-15 09:10 - 2015-03-17 01:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  805. 2015-04-15 09:10 - 2015-03-17 01:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  806. 2015-04-15 09:10 - 2015-03-17 01:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  807. 2015-04-15 09:10 - 2015-03-17 01:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  808. 2015-04-15 09:10 - 2015-03-17 01:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  809. 2015-04-15 09:10 - 2015-03-17 01:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  810. 2015-04-15 09:10 - 2015-03-17 01:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  811. 2015-04-15 09:10 - 2015-03-17 01:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  812. 2015-04-15 09:10 - 2015-03-17 01:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  813. 2015-04-15 09:10 - 2015-03-17 01:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  814. 2015-04-15 09:10 - 2015-03-17 01:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  815. 2015-04-15 09:10 - 2015-03-17 01:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  816. 2015-04-15 09:10 - 2015-03-17 01:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  817. 2015-04-15 09:10 - 2015-03-17 01:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  818. 2015-04-15 09:10 - 2015-03-17 01:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  819. 2015-04-15 09:10 - 2015-03-17 01:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  820. 2015-04-15 09:10 - 2015-03-17 01:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  821. 2015-04-15 09:10 - 2015-03-17 01:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  822. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  823. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  824. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  825. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  826. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  827. 2015-04-15 09:10 - 2015-03-17 01:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  828. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  829. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  830. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  831. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  832. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  833. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  834. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  835. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  836. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  837. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  838. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  839. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  840. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  841. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  842. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  843. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  844. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  845. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  846. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  847. 2015-04-15 09:10 - 2015-03-17 01:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  848. 2015-04-15 09:10 - 2015-03-17 01:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  849. 2015-04-15 09:10 - 2015-03-17 01:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  850. 2015-04-15 09:10 - 2015-03-17 00:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  851. 2015-04-15 09:10 - 2015-03-17 00:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  852. 2015-04-15 09:10 - 2015-03-17 00:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  853. 2015-04-15 09:10 - 2015-03-17 00:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  854. 2015-04-15 09:10 - 2015-03-17 00:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  855. 2015-04-15 09:10 - 2015-03-17 00:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  856. 2015-04-15 09:10 - 2015-03-17 00:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  857. 2015-04-15 09:10 - 2015-03-17 00:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  858. 2015-04-15 09:10 - 2015-03-17 00:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  859. 2015-04-15 09:10 - 2015-03-17 00:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  860. 2015-04-15 09:10 - 2015-03-17 00:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  861. 2015-04-15 09:10 - 2015-03-17 00:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  862. 2015-04-15 09:10 - 2015-03-17 00:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  863. 2015-04-15 09:10 - 2015-03-17 00:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  864. 2015-04-15 09:10 - 2015-03-17 00:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  865. 2015-04-15 09:10 - 2015-03-17 00:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  866. 2015-04-15 09:10 - 2015-03-17 00:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  867. 2015-04-15 09:10 - 2015-03-17 00:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  868. 2015-04-15 09:10 - 2015-03-17 00:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  869. 2015-04-15 09:10 - 2015-03-17 00:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  870. 2015-04-15 09:10 - 2015-03-17 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  871. 2015-04-15 09:10 - 2015-03-17 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  872. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  873. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  874. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  875. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  876. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  877. 2015-04-15 09:10 - 2015-03-17 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  878. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  879. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  880. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  881. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  882. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  883. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  884. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  885. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  886. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  887. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  888. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  889. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  890. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  891. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  892. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  893. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  894. 2015-04-15 09:10 - 2015-03-17 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  895. 2015-04-15 09:10 - 2015-03-16 23:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  896. 2015-04-15 09:10 - 2015-03-16 23:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  897. 2015-04-15 09:10 - 2015-03-16 23:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  898. 2015-04-15 09:10 - 2015-03-16 23:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  899. 2015-04-15 09:10 - 2015-03-16 23:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  900. 2015-04-15 09:10 - 2015-03-16 23:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  901. 2015-04-15 09:10 - 2015-03-09 23:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
  902. 2015-04-15 09:10 - 2015-03-09 23:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
  903. 2015-04-15 09:10 - 2015-03-09 23:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
  904. 2015-04-15 09:10 - 2015-03-09 23:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
  905. 2015-04-15 09:10 - 2015-02-24 23:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
  906. 2015-04-15 09:09 - 2015-03-04 00:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
  907. 2015-04-15 09:09 - 2015-03-04 00:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
  908. 2015-04-15 09:09 - 2015-03-04 00:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
  909. 2015-04-14 15:31 - 2015-04-14 15:31 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
  910. 2015-04-11 14:27 - 2015-04-11 14:27 - 01591023 _____ () C:\Users\home\Downloads\pics (1).zip
  911.  
  912. ==================== One Month Modified Files and Folders =======
  913.  
  914. (If an entry is included in the fixlist, the file\folder will be moved.)
  915.  
  916. 2015-05-09 13:01 - 2013-09-04 10:14 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  917. 2015-05-09 13:01 - 2012-05-22 15:49 - 01994749 _____ () C:\Windows\WindowsUpdate.log
  918. 2015-05-09 10:51 - 2013-12-14 13:14 - 00000000 ____D () C:\Users\home\Desktop\desktop pic storage
  919. 2015-05-09 10:37 - 2014-12-30 23:06 - 00000000 ____D () C:\Users\home\Documents\2015 ABA JOURNAL
  920. 2015-05-09 09:22 - 2009-07-14 00:45 - 00024944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  921. 2015-05-09 09:22 - 2009-07-14 00:45 - 00024944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  922. 2015-05-09 09:11 - 2014-06-19 08:09 - 00000000 ____D () C:\Users\home\AppData\Local\Adobe
  923. 2015-05-08 14:19 - 2013-01-28 17:22 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  924. 2015-05-08 12:46 - 2011-04-02 01:26 - 00000000 ____D () C:\ProgramData\Temp
  925. 2015-05-08 05:29 - 2014-06-28 10:07 - 00002044 _____ () C:\Users\Public\Desktop\Google Slides.lnk
  926. 2015-05-08 05:29 - 2014-06-28 10:07 - 00002042 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
  927. 2015-05-08 05:29 - 2014-06-28 10:07 - 00002032 _____ () C:\Users\Public\Desktop\Google Docs.lnk
  928. 2015-05-08 05:29 - 2014-06-28 10:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
  929. 2015-05-06 12:39 - 2013-02-13 13:16 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForhome
  930. 2015-05-06 12:39 - 2013-02-13 13:16 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForhome.job
  931. 2015-05-06 12:38 - 2012-05-30 10:01 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
  932. 2015-05-06 12:36 - 2012-05-30 09:56 - 00000000 ____D () C:\Users\home\AppData\Roaming\HP Support Assistant
  933. 2015-05-06 12:36 - 2012-05-23 16:02 - 00000000 ____D () C:\Users\home\AppData\Roaming\HpUpdate
  934. 2015-05-05 15:33 - 2011-04-02 01:38 - 00000000 ____D () C:\ProgramData\PDFC
  935. 2015-05-05 15:32 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  936. 2015-05-05 15:32 - 2009-07-14 00:51 - 00108790 _____ () C:\Windows\setupact.log
  937. 2015-05-05 14:53 - 2010-11-20 23:47 - 02232980 _____ () C:\Windows\PFRO.log
  938. 2015-05-05 14:48 - 2012-05-22 17:11 - 00000000 ____D () C:\Users\home\Documents\computer and phones
  939. 2015-05-01 18:19 - 2015-01-05 13:54 - 00000000 ____D () C:\Users\home\Documents\KOGAN 2015
  940. 2015-05-01 18:02 - 2012-05-22 17:13 - 00000000 ____D () C:\Users\home\Documents\MEDICAL
  941. 2015-05-01 17:45 - 2012-05-22 17:19 - 00000000 ____D () C:\Users\home\Documents\My Scans
  942. 2015-05-01 16:59 - 2014-08-05 18:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  943. 2015-05-01 16:56 - 2014-08-05 18:43 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  944. 2015-04-30 20:26 - 2014-09-08 16:26 - 00002185 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  945. 2015-04-30 15:51 - 2014-10-19 17:14 - 00000000 ____D () C:\Users\home\Documents\TERRY
  946. 2015-04-30 15:34 - 2012-05-22 17:11 - 00000000 ____D () C:\Users\home\Documents\cars
  947. 2015-04-28 03:28 - 2012-05-23 11:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
  948. 2015-04-27 20:31 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
  949. 2015-04-27 09:21 - 2013-06-17 17:49 - 00001449 _____ () C:\Users\home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  950. 2015-04-26 22:22 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
  951. 2015-04-25 15:36 - 2012-06-25 12:16 - 00000000 ____D () C:\Users\home\Documents\smoking
  952. 2015-04-23 18:13 - 2012-05-22 17:18 - 00000000 ____D () C:\Users\home\Documents\HOME and repairs
  953. 2015-04-22 18:13 - 2009-07-14 01:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
  954. 2015-04-20 15:35 - 2012-05-22 17:19 - 00000000 ____D () C:\Users\home\Documents\politics
  955. 2015-04-17 03:07 - 2011-02-11 13:15 - 00774592 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
  956. 2015-04-17 00:43 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\AppCompat
  957. 2015-04-16 19:49 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
  958. 2015-04-16 04:04 - 2014-05-06 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
  959. 2015-04-16 03:46 - 2012-05-22 16:20 - 00000000 ____D () C:\ProgramData\Microsoft Help
  960. 2015-04-16 03:38 - 2013-08-14 23:21 - 00000000 ____D () C:\Windows\system32\MRT
  961. 2015-04-16 03:13 - 2012-05-22 21:01 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  962. 2015-04-14 15:31 - 2013-09-04 10:14 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
  963. 2015-04-14 15:31 - 2012-05-23 14:43 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  964. 2015-04-14 15:31 - 2012-05-23 14:43 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  965. 2015-04-13 09:26 - 2012-12-03 09:21 - 00003216 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForHOME-HP$
  966. 2015-04-13 09:26 - 2012-12-03 09:21 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForHOME-HP$.job
  967.  
  968. ==================== Files in the root of some directories =======
  969.  
  970. 2012-09-01 16:34 - 2012-09-01 16:34 - 0000288 _____ () C:\Users\home\AppData\Roaming\.backup.dm
  971. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006172 _____ () C:\Users\home\AppData\Local\Temp1.PNG
  972. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004159 _____ () C:\Users\home\AppData\Local\Temp103.PNG
  973. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004649 _____ () C:\Users\home\AppData\Local\Temp109.PNG
  974. 2013-11-04 13:14 - 2013-11-04 13:14 - 0003618 _____ () C:\Users\home\AppData\Local\Temp112.PNG
  975. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006400 _____ () C:\Users\home\AppData\Local\Temp119.PNG
  976. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004764 _____ () C:\Users\home\AppData\Local\Temp125.PNG
  977. 2013-11-04 13:14 - 2013-11-04 13:14 - 0008445 _____ () C:\Users\home\AppData\Local\Temp133.PNG
  978. 2013-11-04 13:14 - 2013-11-04 13:14 - 0008075 _____ () C:\Users\home\AppData\Local\Temp139.PNG
  979. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007140 _____ () C:\Users\home\AppData\Local\Temp14.PNG
  980. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006685 _____ () C:\Users\home\AppData\Local\Temp141.PNG
  981. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006066 _____ () C:\Users\home\AppData\Local\Temp145.PNG
  982. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004614 _____ () C:\Users\home\AppData\Local\Temp15.PNG
  983. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004772 _____ () C:\Users\home\AppData\Local\Temp151.PNG
  984. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007098 _____ () C:\Users\home\AppData\Local\Temp155.PNG
  985. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004727 _____ () C:\Users\home\AppData\Local\Temp157.PNG
  986. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005091 _____ () C:\Users\home\AppData\Local\Temp16.PNG
  987. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006456 _____ () C:\Users\home\AppData\Local\Temp161.PNG
  988. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005055 _____ () C:\Users\home\AppData\Local\Temp162.PNG
  989. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006442 _____ () C:\Users\home\AppData\Local\Temp168.PNG
  990. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004445 _____ () C:\Users\home\AppData\Local\Temp170.PNG
  991. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007882 _____ () C:\Users\home\AppData\Local\Temp176.PNG
  992. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006822 _____ () C:\Users\home\AppData\Local\Temp181.PNG
  993. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006271 _____ () C:\Users\home\AppData\Local\Temp198.PNG
  994. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005325 _____ () C:\Users\home\AppData\Local\Temp199.PNG
  995. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004726 _____ () C:\Users\home\AppData\Local\Temp206.PNG
  996. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005896 _____ () C:\Users\home\AppData\Local\Temp228.PNG
  997. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007065 _____ () C:\Users\home\AppData\Local\Temp230.PNG
  998. 2013-11-04 13:14 - 2013-11-04 13:14 - 0002646 _____ () C:\Users\home\AppData\Local\Temp24.PNG
  999. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004981 _____ () C:\Users\home\AppData\Local\Temp282.PNG
  1000. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004864 _____ () C:\Users\home\AppData\Local\Temp39.PNG
  1001. 2013-11-04 13:14 - 2013-11-04 13:14 - 0003708 _____ () C:\Users\home\AppData\Local\Temp4.PNG
  1002. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006432 _____ () C:\Users\home\AppData\Local\Temp43.PNG
  1003. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005681 _____ () C:\Users\home\AppData\Local\Temp5.PNG
  1004. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004376 _____ () C:\Users\home\AppData\Local\Temp6.PNG
  1005. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005346 _____ () C:\Users\home\AppData\Local\Temp60.PNG
  1006. 2013-11-04 13:14 - 2013-11-04 13:14 - 0003623 _____ () C:\Users\home\AppData\Local\Temp62.PNG
  1007. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007893 _____ () C:\Users\home\AppData\Local\Temp7.PNG
  1008. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005323 _____ () C:\Users\home\AppData\Local\Temp82.PNG
  1009. 2013-11-04 13:14 - 2013-11-04 13:14 - 0007000 _____ () C:\Users\home\AppData\Local\Temp85.PNG
  1010. 2013-11-04 13:14 - 2013-11-04 13:14 - 0004987 _____ () C:\Users\home\AppData\Local\Temp93.PNG
  1011. 2013-11-04 13:14 - 2013-11-04 13:14 - 0005345 _____ () C:\Users\home\AppData\Local\Temp94.PNG
  1012. 2013-11-04 13:14 - 2013-11-04 13:14 - 0006266 _____ () C:\Users\home\AppData\Local\Temp96.PNG
  1013. 2012-05-23 09:04 - 2014-06-26 15:27 - 0008704 _____ () C:\ProgramData\hpzinstall.log
  1014.  
  1015. Some content of TEMP:
  1016. ====================
  1017. C:\Users\home\AppData\Local\Temp\_is42EC.exe
  1018. C:\Users\home\AppData\Local\Temp\_is879A.exe
  1019. C:\Users\home\AppData\Local\Temp\_isAE6C.exe
  1020. C:\Users\home\AppData\Local\Temp\_isBE34.exe
  1021. C:\Users\home\AppData\Local\Temp\_isBF7C.exe
  1022. C:\Users\home\AppData\Local\Temp\_isF0E7.exe
  1023.  
  1024.  
  1025. ==================== Bamital & volsnap Check =================
  1026.  
  1027. (There is no automatic fix for files that do not pass verification.)
  1028.  
  1029. C:\Windows\System32\winlogon.exe => File is digitally signed
  1030. C:\Windows\System32\wininit.exe => File is digitally signed
  1031. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  1032. C:\Windows\explorer.exe => File is digitally signed
  1033. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  1034. C:\Windows\System32\svchost.exe => File is digitally signed
  1035. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  1036. C:\Windows\System32\services.exe => File is digitally signed
  1037. C:\Windows\System32\User32.dll => File is digitally signed
  1038. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  1039. C:\Windows\System32\userinit.exe => File is digitally signed
  1040. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  1041. C:\Windows\System32\rpcss.dll => File is digitally signed
  1042. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  1043.  
  1044.  
  1045. LastRegBack: 2015-05-04 19:40
  1046.  
  1047. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!