For a little over one week now my computer begins a memory dump whenever I attempt to login to my comcast email. I use google chrome. I have scanned the computer with McAfee, Spybot and Malwarebytes in regular and safe mode to no avail. I ran FRST and see a ton of stuff that has my eyebrow raised. My issue is I have zero clue how to put together a fixlist to correct all of this stuff. Your help will be greatly appreciated. Thank you!!
Computer Crashes whenever I check email online (Chrome)
- Thread starter Brad Koch
- Start date
- Mar 8, 2013
- 22,627
- Mar 8, 2013
- 22,627
Yes, something is causing these issues. Let's perform some maintenance as first step:
Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
Post its content into your next reply.
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
- Right-click on
icon and select
Run as Administrator to start the tool.
- Wait patiently until the main console will appear, it may take a minute or two.
- In the main box please paste in the following script:
Code:createsrpoint; autoclean; emptyalltemp; ipconfig /flushdns >>"%temp%\log.txt";b - Make sure that Scan All Users option is checked.
- Push Run Script and wait patiently. The scan may take a couple of minutes.
- When the scan completes, a zoek-results logfile should open in notepad.
- If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
Just an FYI- I've had three memory dumps since I ran Zoek.
Here's the log...
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Susan on Sun 07/19/2015 at 13:43:25.51.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Susan\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
7/19/2015 1:44:41 PM Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~2\Applian Technologies deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Roxio deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\APN deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Tarma Installer deleted successfully
C:\Users\Susan\AppData\Roaming\GrabPro deleted successfully
C:\Users\Susan\AppData\Roaming\Roxio deleted successfully
C:\Users\Susan\AppData\Roaming\TP deleted successfully
C:\Users\Susan\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\Brad\AppData\Local\VirtualStore deleted successfully
C:\Users\Susan\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Susan\AppData\Local\EmieSiteList deleted successfully
C:\Users\Susan\AppData\Local\EmieUserList deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EC1C4567-00F3-43DD-AFD4-1B0D20F99129} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6565F37-655B-4c9e-AA5F-0307AC976ED4} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.7.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.7.0 deleted successfully
==== Batch Command(s) Run By Tool======================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Applian Technologies not found
C:\PROGRA~2\Roxio not found
C:\PROGRA~2\GUT871A.tmp deleted
C:\PROGRA~2\GUM8719.tmp deleted
C:\PROGRA~2\AVG Security Toolbar deleted
C:\PROGRA~3\UpdaterLog.txt deleted
C:\PROGRA~3\SPL121F.tmp deleted
C:\PROGRA~3\SPL127.tmp deleted
C:\PROGRA~3\SPL2384.tmp deleted
C:\PROGRA~3\SPL25A1.tmp deleted
C:\PROGRA~3\SPL26F0.tmp deleted
C:\PROGRA~3\SPL27C2.tmp deleted
C:\PROGRA~3\SPL3283.tmp deleted
C:\PROGRA~3\SPL38FC.tmp deleted
C:\PROGRA~3\SPL3B2B.tmp deleted
C:\PROGRA~3\SPL3E1.tmp deleted
C:\PROGRA~3\SPL3F93.tmp deleted
C:\PROGRA~3\SPL41F7.tmp deleted
C:\PROGRA~3\SPL46FE.tmp deleted
C:\PROGRA~3\SPL4884.tmp deleted
C:\PROGRA~3\SPL48D3.tmp deleted
C:\PROGRA~3\SPL4DE6.tmp deleted
C:\PROGRA~3\SPL4FDF.tmp deleted
C:\PROGRA~3\SPL546F.tmp deleted
C:\PROGRA~3\SPL59AC.tmp deleted
C:\PROGRA~3\SPL750.tmp deleted
C:\PROGRA~3\SPL7FD9.tmp deleted
C:\PROGRA~3\SPL80DA.tmp deleted
C:\PROGRA~3\SPL831B.tmp deleted
C:\PROGRA~3\SPL85A3.tmp deleted
C:\PROGRA~3\SPL8B9B.tmp deleted
C:\PROGRA~3\SPL8D3B.tmp deleted
C:\PROGRA~3\SPL8EF6.tmp deleted
C:\PROGRA~3\SPL925F.tmp deleted
C:\PROGRA~3\SPL9352.tmp deleted
C:\PROGRA~3\SPL9781.tmp deleted
C:\PROGRA~3\SPL9D1A.tmp deleted
C:\PROGRA~3\SPL9F1D.tmp deleted
C:\PROGRA~3\SPLA2AA.tmp deleted
C:\PROGRA~3\SPLA6AA.tmp deleted
C:\PROGRA~3\SPLA806.tmp deleted
C:\PROGRA~3\SPLAD8.tmp deleted
C:\PROGRA~3\SPLAF9B.tmp deleted
C:\PROGRA~3\SPLB05A.tmp deleted
C:\PROGRA~3\SPLB562.tmp deleted
C:\PROGRA~3\SPLBE2.tmp deleted
C:\PROGRA~3\SPLBE7B.tmp deleted
C:\PROGRA~3\SPLBED.tmp deleted
C:\PROGRA~3\SPLC0FC.tmp deleted
C:\PROGRA~3\SPLC51A.tmp deleted
C:\PROGRA~3\SPLDA86.tmp deleted
C:\PROGRA~3\SPLE050.tmp deleted
C:\PROGRA~3\SPLE1E5.tmp deleted
C:\PROGRA~3\SPLE24A.tmp deleted
C:\PROGRA~3\SPLE668.tmp deleted
C:\PROGRA~3\SPLF72A.tmp deleted
C:\PROGRA~3\Avg_Update_0215tb deleted
C:\PROGRA~3\Avg_Update_0814tb deleted
C:\PROGRA~3\Avg_Update_1214tb deleted
C:\PROGRA~3\AVG Secure Search deleted
C:\PROGRA~3\AVG SafeGuard toolbar deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Brad\AppData\Local\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\Local\AVG Secure Search deleted
C:\Users\Susan\AppData\Local\AVG SafeGuard toolbar deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\SearchProtect deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\Users\Brad\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\LocalLow\Conduit deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Windows\wininit.ini deleted
C:\components deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
"C:\Windows\Installer\380000a8.msi" deleted
"C:\PROGRA~2\AVG SafeGuard toolbar\vprot.exe" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.7.0\avgdttbx.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.7.0\SiteSafety.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.7.0\log4cplusU.dll" deleted
"C:\PROGRA~2\AVG SafeGuard toolbar" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.7.0" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.7.0" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.7.0" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [07/17/2015 11:02 AM]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [07/17/2015 11:02 AM]
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.134
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bopakagnckmlgajfccecajhnimjiiedh - No path found[]
fheoggkfdfchfphceeifdbepaooicaho - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx[07/03/2015 03:26 PM]
SiteAdvisor - Brad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
Chrome Hotword Shared Module - Brad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
SiteAdvisor - Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
Chrome Hotword Shared Module - Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
==== Chromium Startpages ======================
C:\Users\Brad\AppData\Local\Google\Chrome\User Data\Default\Preferences
gA=="},"net":{"http_server_properties":{"servers":{"accounts.google.com:443":{"supports_spdy":true},"ad.doubleclick.net:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}]},"apis.google.com:443":{"supports_spdy":true},"chrome.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"clickserve.dartsearch.net:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"clients1.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":20688},"supports_spdy":true},"clients2.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"clients2.googleusercontent.com:443":{"supports_spdy":true},"clients4.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"code.jquery.com:443":{"supports_spdy":true},"fonts.googleapis.com:443":{"supports_spdy":true},"fonts.gstatic.com:443":{"supports_spdy":true},"googleads.g.doubleclick.net:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":15655},"supports_spdy":true},"i.ytimg.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"oauth.googleusercontent.com:443":{"supports_spdy":true},"s.ytimg.com:443":{"supports_spdy":true},"s.ytimg.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"ssl.google-analytics.com:443":{"supports_spdy":true},"ssl.gstatic.com:443":{"supports_spdy":true},"www.facebook.com:443":{"supports_spdy":true},"www.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":63243},"supports_spdy":true},"www.google.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.googleadservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}]},"www.googleapis.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"www.gstatic.com:443":{"supports_spdy":true},"www.youtube.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"www.youtube.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]}},"supports_quic":{"address":"10.0.1.6","used_quic":true},"version":3}},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":26,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","per_host_zoom_levels":{}},"protection":{"macs":{}},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13080691119676731"},"sync_promo":{"show_on_first_run_allowed":false},"translate_blocked_languages":["en"],"translate_whitelists":{}}
4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/gcm","https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/chromenow/v1/*","https://*.googleapis.com/gcm/*","https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\43.0.2357.130\\resources\\google_now","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"x","commands":{},"content_settings":[],"creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13080691147348230","lastpingday":"13080639603922106","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","manifest_version":2,"name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"homepage":"http://www.google.com/","homepage_is_newtabpage":false,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"5018BC1C1EF1C0E64A6F1F6D0A68BEED2B0CD66F8C3C82FF16161D42F32A69B9"},"default_search_provider":{"keyword":"49471F96B3396AE687DBDEBEF3CA5DC035E3FF98326228B03B48FABA4A9024B4","name":"C26108C4BC08FE6B3154A5BBF50FF7E273EFB2B05B1D9EDB484D45DB43AAF69F","search_url":"D4B509E7C932601CF5DFD3D483F7FAF2A4370BABD7C103657D2CF414646E2F53"},"default_search_provider_data":{"template_url_data":"20F43C967765560E2E58F50F5AE5408D3FFA9DDB98F1B87A1B0C7F28DD218C63"},"extensions":{"settings":{"aapocclcgogkmnckokdopfmhonfmgoek":"3E1FD65B552F6EEBE25B7DF1493E8E3593A1ECBAEBC96978D78A5090F2D6D554","ahfgeienlihckogmohjhadlkjgocpleb":"75F1D1C3D09F0CBC6CA92C68110060A4BC2C33C33CB305C63AE05A207F3ACB4B","aohghmighlieiainnegkcijnfilokake":"4E8EE6DA77DD7690A51F09145F46B5C62BB8FDDA5086C8FB95C6B96B6836B304","apdfllckaahabafndbhieahigkjlhalf":"B5C0A60F78512AC9863A13F44D5FB1502C33C12D0C3642C83CD2E98E701BBA8A","bepbmhgboaologfdajaanbcjmnhjmhfn":"23531ECA5771AEE134A887310BB494119D547B3E5EAFB0C1E7AD473DF7A4CD6C","blpcfgokakmgnkcojhhkbfbldkacnbeo":"FFF59095E4CF1EC3DE43D701D7595A783332331CFB5E2F745AD5D224138518E8","coobgpohoikkiipiblmjeljniedjpjpf":"1915BC813CFEF0575F8F8744802979D94B4AEF2482C87B4491E4F944A3E472F1","eemcgdkfndhakfknompkggombfjjjeno":"0F72B349A220A056D545120B58F523C42DDD294FFBCB5A965B07025980F3258A","ennkphjdgehloodpbhlhldgbnhmacadg":"56F0EF4E0B79504D0D681399F3B96989AF753E58EEFBD12628B3F54D20B1FA90","felcaaldnbdncclmgdcncolpebgiejap":"F50B1CD0E600543194BA33C14CEF2B345B08DF92E077916AB3135D9A726C7679","fheoggkfdfchfphceeifdbepaooicaho":"F576A74EBA6DFA8BF09208447113BD0EDBA82BEB30859D5589796F6E9F617574","gfdkimpbcpahaombhbimeihdjnejgicl":"83D0767B66E9CEFA27FF2C06BC684FE26E65F47555D1DD7DF53A0BDC11B609BD","kdfbddbdpnahdahmamlolacimfdbeckk":"923550FED8BBAEF308692E775E05086641997C9341DC2340007E56E662AFA09E","kmendfapggjehodndflmmgagdbamhnfd":"08E02E9C96055F2F245EB89A7D02E37965E3308EBE8BC31BB9E02120A3635BB7","lccekmodgklaepjeofjdjpbminllajkg":"BEA720E74535B8241216522E1B95C5BE12DF47259AF68620A431DB427E3B7228","mfehgcgbbipciphmccgaenjidiccnmng":"0CF158F643B105E329A630B09765D4F030BCC56D7C4E019DA202761EE32CD227","mgndgikekgjfcpckkfioiadnlibdjbkf":"F5F4B732ADE33F7213F7341972C5C6423F5147A3F12A04B0E5D2650371711F33","mhjfbmdgcfjbbpaeojofohoefgiehjai":"0783442B56F3B9A3F30200733CD1688E9BBFA1B183B0E72F12FAC7D4C28409EC","nbpagnldghgfoolbancepceaanlmhfmd":"7D48FEB7C0B5FA4A75EF151F90FD93E6E3F510406BD71F20F213EF9149BCDE8E","neajdppkdcdipfabeoofebfddakdcjhd":"98EAA3C08AC736B414D2974F52D4B4F0BCCE345F08BD3865A47CB1B8CEE9D9FD","nkeimhogjdpnpccoofpliimaahmaaome":"2E6C5C9796F6C7B00DB41B614F61318AA3B90332DB1F2907C77211175BEC73D7","nmmhkkegccagdldgiimedpiccmgmieda":"63EA7240C67A5AAB0490C300770B0F79DE7D07BF9F13F91E3C46CBB8D0550456","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"F6A3522BF91C8BB6844C90CC2906604D3E02250A73EE1CE03910ACC804F29275","pjkljhegncpnkpknbcohdijeoejaedia":"F1D9EC33D5348569EBD99EE9E5ADC00C67686AD63384A59C1D71D9ABFB1C95EF"}},"google":{"services":{"last_username":"E6EC875357AA69944727B3DF3711CB6902E5C6036E975A8C8151C55F2DC09312","username":"7EA5BEEFA078D61FBE02674521DD4B9CE8B43C8919A170BF5124615B57D37C18"}},"homepage":"4763F61762A9DF7A173F631AD9D94796DF7FC726AA70525EB26C46FAC2442BA8","homepage_is_newtabpage":"8A80439F2A20EFF9A8E906840E33DBF8BEC3F77F701A97617C00CF404B51C60F","pinned_tabs":"A5ECFD5BED09DFC68190F9386F7696F7A8BA707E53D6B924FBB94EBFE9C28465","prefs":{"preference_reset_time":"DD86EF8C5CC1B6A2AF27012B0BAAEF59C23BFC66705FD93687635E1CC8DCCD76"},"profile":{"reset_prompt_memento":"A7ABABD7C1413F8995199292D0D366FEF195B89FCA264D39416AB39847293883"},"safebrowsing":{"incidents_sent":"581884AD9D14698E59878DD36B4F83C8656BD8C4F69A388EAEB8D9A115155D91"},"search_provider_overrides":"CD8B3C609B6B4BBD9717150A0D7D0216B0CCA0FE37FE09A3008B9F3EE478637F","session":{"restore_on_startup":"23BF652C9501560F45582686F6F2E2AA464E37B03FE671CFB8DC53D6A5FB9CBC","startup_urls":"9F9F2B1A27599C56D11654E02AEC1D69ED3614DF7BF47CB4637F769CD736839E"},"software_reporter":{"prompt_reason":"4508192BE3B1A4FA46AAECB27ED8D607AEB2D3612E890B3706319D980AD95632","prompt_seed":"4E0C33E71554BD320206C3C7910F9F7C17AA22C127F6A80493D430851604F05C","prompt_version":"6BB29AF9C6D0C8BCEC8080157A14E0F14DB9DE8743A550F1988EE508FD114438"},"sync":{"remaining_rollback_tries":"75D36D26DB7CF1E81A91584D30AFF2802D014FFF06C8A51FC12D0D4863BCAB1D"}},"super_mac":"EF75847E432177F9A97E01507619991C1675869493E0337DAE773EC8789971D6"},"session":{"restore_on_startup":4,"startup_urls":["http://www.google.com/"]}}
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Preferences
_OUFUKU\",\"vendor_id\":\"69\",\"width_microns\":148000},{\"custom_display_name\":\"Comm. Env. #10\",\"height_microns\":241300,\"name\":\"NA_NUMBER_10\",\"vendor_id\":\"20\",\"width_microns\":104700},{\"custom_display_name\":\"DL Env.\",\"height_microns\":220000,\"name\":\"ISO_DL\",\"vendor_id\":\"27\",\"width_microns\":110000},{\"custom_display_name\":\"Choukei 3 120x235mm\",\"height_microns\":235000,\"name\":\"JPN_CHOU3\",\"vendor_id\":\"73\",\"width_microns\":120000},{\"custom_display_name\":\"Choukei 4 90x205mm\",\"height_microns\":205000,\"name\":\"JPN_CHOU4\",\"vendor_id\":\"74\",\"width_microns\":90000},{\"custom_display_name\":\"Youkei 4 105x235mm\",\"height_microns\":235000,\"name\":\"JPN_YOU4\",\"vendor_id\":\"91\",\"width_microns\":105000},{\"custom_display_name\":\"Youkei 6 98x190mm\",\"height_microns\":190000,\"name\":\"NA_MONARCH\",\"vendor_id\":\"126\",\"width_microns\":98000},{\"custom_display_name\":\"Disc tray J\",\"height_microns\":224800,\"vendor_id\":\"127\",\"width_microns\":130000},{\"custom_display_name\":\"11\\\"x17\\\" 279.4x431.8mm (Scaled)\",\"height_microns\":431800,\"name\":\"NA_LEDGER\",\"vendor_id\":\"3\",\"width_microns\":279400},{\"custom_display_name\":\"17\\\"x22\\\" 431.8x558.8mm (Scaled)\",\"height_microns\":558800,\"name\":\"NA_C\",\"vendor_id\":\"24\",\"width_microns\":431800},{\"custom_display_name\":\"A3 (Scaled)\",\"height_microns\":420000,\"name\":\"ISO_A3\",\"vendor_id\":\"8\",\"width_microns\":297000},{\"custom_display_name\":\"A3+ 13\\\"x19\\\" 33x48cm (Scaled)\",\"height_microns\":483000,\"vendor_id\":\"274\",\"width_microns\":329000},{\"custom_display_name\":\"A2 (Scaled)\",\"height_microns\":594000,\"name\":\"ISO_A2\",\"vendor_id\":\"66\",\"width_microns\":420000},{\"custom_display_name\":\"B4 (Scaled)\",\"height_microns\":364000,\"name\":\"JIS_B4\",\"vendor_id\":\"12\",\"width_microns\":257000},{\"custom_display_name\":\"B3 (Scaled)\",\"height_microns\":515000,\"name\":\"JIS_B3\",\"vendor_id\":\"257\",\"width_microns\":364000},{\"custom_display_name\":\"10\\\"x12\\\" 25x30cm (Scaled)\",\"height_microns\":304800,\"vendor_id\":\"297\",\"width_microns\":254000},{\"custom_display_name\":\"14\\\"x17\\\" 36x43cm (Scaled)\",\"height_microns\":431800,\"vendor_id\":\"296\",\"width_microns\":355600}]},\"page_orientation\":{\"option\":[{\"is_default\":true,\"type\":\"PORTRAIT\"},{\"type\":\"LANDSCAPE\"},{\"type\":\"AUTO\"}]},\"supported_content_type\":[{\"content_type\":\"application/pdf\"}]},\"version\":\"1.0\"},\"mediaSize\":{\"custom_display_name\":\"Letter 8.5\\\"x11\\\" 22x28cm\",\"height_microns\":279400,\"is_default\":true,\"name\":\"NA_LETTER\",\"vendor_id\":\"1\",\"width_microns\":215900},\"vendorOptions\":{},\"selectedDestinationExtensionId\":\"\",\"selectedDestinationExtensionName\":\"\"}","savePath":"C:\\Users\\Susan\\Documents"}},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]abc.go.com,*":{"setting":1},"https://[*.]www.youtube.com:443,*":{"setting":1}},"geolocation":{"http://www.competitivecyclist.com:80,http://www.competitivecyclist.com:80":{"last_used":1433362659.090145,"setting":1},"http://www.food.com:80,http://www.food.com:80":{"setting":2}},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{"*,*":{"per_resource":{"npsitesafety.dll":1}}},"popups":{"[*.]www.ilga.gov,*":{"setting":1},"https://[*.]member.cvty.com:443,*":{"setting":1}},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}},"[*.]abc.go.com,*":{"fullscreen":1},"[*.]www.ilga.gov,*":{"popups":1},"https://[*.]member.cvty.com:443,*":{"popups":1},"https://[*.]www.youtube.com:443,*":{"fullscreen":1}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","password_manager_groups_for_domains":[5,4,null,null,null,null,6],"per_host_zoom_levels":{}},"protection":{"macs":{}},"savefile":{"default_directory":"C:\\Users\\Susan\\Downloads"},"selectfile":{"last_directory":"C:\\Users\\Susan\\Downloads"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13043109225341891","urls_to_restore_on_startup":null},"settings":{"privacy":{"drm_salt":"777B07F264780AA0242A3222D0A7C54E461EFA065B690525556756CAC5912CB7"}},"sync":{"suppress_start":true},"sync_promo":{"show_on_first_run_allowed":false},"translate_accepted_count":{"es":0},"translate_blocked_languages":["en"],"translate_denied_count":{"es":1},"translate_last_denied_time":1427065162809.984,"translate_whitelists":{},"webkit":{"webprefs":{"default_fixed_font_size":17,"default_font_size":20}},"zerosuggest":{"cachedresults":""}}
_OUFUKU\",\"vendor_id\":\"69\",\"width_microns\":148000},{\"custom_display_name\":\"Comm. Env. #10\",\"height_microns\":241300,\"name\":\"NA_NUMBER_10\",\"vendor_id\":\"20\",\"width_microns\":104700},{\"custom_display_name\":\"DL Env.\",\"height_microns\":220000,\"name\":\"ISO_DL\",\"vendor_id\":\"27\",\"width_microns\":110000},{\"custom_display_name\":\"Choukei 3 120x235mm\",\"height_microns\":235000,\"name\":\"JPN_CHOU3\",\"vendor_id\":\"73\",\"width_microns\":120000},{\"custom_display_name\":\"Choukei 4 90x205mm\",\"height_microns\":205000,\"name\":\"JPN_CHOU4\",\"vendor_id\":\"74\",\"width_microns\":90000},{\"custom_display_name\":\"Youkei 4 105x235mm\",\"height_microns\":235000,\"name\":\"JPN_YOU4\",\"vendor_id\":\"91\",\"width_microns\":105000},{\"custom_display_name\":\"Youkei 6 98x190mm\",\"height_microns\":190000,\"name\":\"NA_MONARCH\",\"vendor_id\":\"126\",\"width_microns\":98000},{\"custom_display_name\":\"Disc tray J\",\"height_microns\":224800,\"vendor_id\":\"127\",\"width_microns\":130000},{\"custom_display_name\":\"11\\\"x17\\\" 279.4x431.8mm (Scaled)\",\"height_microns\":431800,\"name\":\"NA_LEDGER\",\"vendor_id\":\"3\",\"width_microns\":279400},{\"custom_display_name\":\"17\\\"x22\\\" 431.8x558.8mm (Scaled)\",\"height_microns\":558800,\"name\":\"NA_C\",\"vendor_id\":\"24\",\"width_microns\":431800},{\"custom_display_name\":\"A3 (Scaled)\",\"height_microns\":420000,\"name\":\"ISO_A3\",\"vendor_id\":\"8\",\"width_microns\":297000},{\"custom_display_name\":\"A3+ 13\\\"x19\\\" 33x48cm (Scaled)\",\"height_microns\":483000,\"vendor_id\":\"274\",\"width_microns\":329000},{\"custom_display_name\":\"A2 (Scaled)\",\"height_microns\":594000,\"name\":\"ISO_A2\",\"vendor_id\":\"66\",\"width_microns\":420000},{\"custom_display_name\":\"B4 (Scaled)\",\"height_microns\":364000,\"name\":\"JIS_B4\",\"vendor_id\":\"12\",\"width_microns\":257000},{\"custom_display_name\":\"B3 (Scaled)\",\"height_microns\":515000,\"name\":\"JIS_B3\",\"vendor_id\":\"257\",\"width_microns\":364000},{\"custom_display_name\":\"10\\\"x12\\\" 25x30cm (Scaled)\",\"height_microns\":304800,\"vendor_id\":\"297\",\"width_microns\":254000},{\"custom_display_name\":\"14\\\"x17\\\" 36x43cm (Scaled)\",\"height_microns\":431800,\"vendor_id\":\"296\",\"width_microns\":355600}]},\"page_orientation\":{\"option\":[{\"is_default\":true,\"type\":\"PORTRAIT\"},{\"type\":\"LANDSCAPE\"},{\"type\":\"AUTO\"}]},\"supported_content_type\":[{\"content_type\":\"application/pdf\"}]},\"version\":\"1.0\"},\"mediaSize\":{\"custom_display_name\":\"Letter 8.5\\\"x11\\\" 22x28cm\",\"height_microns\":279400,\"is_default\":true,\"name\":\"NA_LETTER\",\"vendor_id\":\"1\",\"width_microns\":215900},\"vendorOptions\":{},\"selectedDestinationExtensionId\":\"\",\"selectedDestinationExtensionName\":\"\"}","savePath":"C:\\Users\\Susan\\Documents"}},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]abc.go.com,*":{"setting":1},"https://[*.]www.youtube.com:443,*":{"setting":1}},"geolocation":{"http://www.competitivecyclist.com:80,http://www.competitivecyclist.com:80":{"last_used":1433362659.090145,"setting":1},"http://www.food.com:80,http://www.food.com:80":{"setting":2}},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{"*,*":{"per_resource":{"npsitesafety.dll":1}}},"popups":{"[*.]www.ilga.gov,*":{"setting":1},"https://[*.]member.cvty.com:443,*":{"setting":1}},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}},"[*.]abc.go.com,*":{"fullscreen":1},"[*.]www.ilga.gov,*":{"popups":1},"https://[*.]member.cvty.com:443,*":{"popups":1},"https://[*.]www.youtube.com:443,*":{"fullscreen":1}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","password_manager_groups_for_domains":[5,4,null,null,null,null,6],"per_host_zoom_levels":{}},"protection":{"macs":{}},"savefile":{"default_directory":"C:\\Users\\Susan\\Downloads"},"selectfile":{"last_directory":"C:\\Users\\Susan\\Downloads"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13043109225341891","urls_to_restore_on_startup":null},"settings":{"privacy":{"drm_salt":"777B07F264780AA0242A3222D0A7C54E461EFA065B690525556756CAC5912CB7"}},"sync":{"suppress_start":true},"sync_promo":{"show_on_first_run_allowed":false},"translate_accepted_count":{"es":0},"translate_blocked_languages":["en"],"translate_denied_count":{"es":1},"translate_last_denied_time":1427065162809.984,"translate_whitelists":{},"webkit":{"webprefs":{"default_fixed_font_size":17,"default_font_size":20}},"zerosuggest":{"cachedresults":""}}
B0B59B6DBD77A93150F4C22C0117FA"},"session":{"restore_on_startup":4,"startup_urls":["http://www.google.com/"]},"software_reporter":{"prompt_reason":0,"prompt_seed":"20150601","prompt_version":"3.21.0"},"sync":{"remaining_rollback_tries":0}}
==== Chromium Fix ======================
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services1.capitalone.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services1.capitalone.com_0.localstorage-journal deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services2.capitalone.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services2.capitalone.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://mysearch.avg.com?cid={A0743...coid=avgtbavg&cmpid=0715tb&pr=sa&d=2014-02-08 12:39:16&v=18.7.0.147&pid=safeguard&sg=0&sap=hp"
"Search Bar"="http://www.google.com/ie"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{EC1C4567-00F3-43DD-AFD4-1B0D20F99129}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC1C4567-00F3-43DD-AFD4-1B0D20F99129}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchMigratedDefaultURL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
{49606DC7-976D-4030-A74E-9FB5C842FA68} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\avg@toolbar deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5392EF0065BF0144BAF56D7EC071172D deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{00FE2935-FB56-4410-AB5F-D6E70C1771D2} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2FD94FBC-07AE-475C-B522-BFE899B9048E} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\5392EF0065BF0144BAF56D7EC071172D deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSystemDetect deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Brad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Brad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Brad\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=1681 folders=582 356514729 bytes)
==== Empty Temp Folders ======================
C:\Users\Brad\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Susan\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Susan\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
Here's the log...
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Susan on Sun 07/19/2015 at 13:43:25.51.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Susan\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
7/19/2015 1:44:41 PM Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~2\Applian Technologies deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Roxio deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\APN deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Tarma Installer deleted successfully
C:\Users\Susan\AppData\Roaming\GrabPro deleted successfully
C:\Users\Susan\AppData\Roaming\Roxio deleted successfully
C:\Users\Susan\AppData\Roaming\TP deleted successfully
C:\Users\Susan\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\Brad\AppData\Local\VirtualStore deleted successfully
C:\Users\Susan\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Susan\AppData\Local\EmieSiteList deleted successfully
C:\Users\Susan\AppData\Local\EmieUserList deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EC1C4567-00F3-43DD-AFD4-1B0D20F99129} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6565F37-655B-4c9e-AA5F-0307AC976ED4} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.7.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.7.0 deleted successfully
==== Batch Command(s) Run By Tool======================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Applian Technologies not found
C:\PROGRA~2\Roxio not found
C:\PROGRA~2\GUT871A.tmp deleted
C:\PROGRA~2\GUM8719.tmp deleted
C:\PROGRA~2\AVG Security Toolbar deleted
C:\PROGRA~3\UpdaterLog.txt deleted
C:\PROGRA~3\SPL121F.tmp deleted
C:\PROGRA~3\SPL127.tmp deleted
C:\PROGRA~3\SPL2384.tmp deleted
C:\PROGRA~3\SPL25A1.tmp deleted
C:\PROGRA~3\SPL26F0.tmp deleted
C:\PROGRA~3\SPL27C2.tmp deleted
C:\PROGRA~3\SPL3283.tmp deleted
C:\PROGRA~3\SPL38FC.tmp deleted
C:\PROGRA~3\SPL3B2B.tmp deleted
C:\PROGRA~3\SPL3E1.tmp deleted
C:\PROGRA~3\SPL3F93.tmp deleted
C:\PROGRA~3\SPL41F7.tmp deleted
C:\PROGRA~3\SPL46FE.tmp deleted
C:\PROGRA~3\SPL4884.tmp deleted
C:\PROGRA~3\SPL48D3.tmp deleted
C:\PROGRA~3\SPL4DE6.tmp deleted
C:\PROGRA~3\SPL4FDF.tmp deleted
C:\PROGRA~3\SPL546F.tmp deleted
C:\PROGRA~3\SPL59AC.tmp deleted
C:\PROGRA~3\SPL750.tmp deleted
C:\PROGRA~3\SPL7FD9.tmp deleted
C:\PROGRA~3\SPL80DA.tmp deleted
C:\PROGRA~3\SPL831B.tmp deleted
C:\PROGRA~3\SPL85A3.tmp deleted
C:\PROGRA~3\SPL8B9B.tmp deleted
C:\PROGRA~3\SPL8D3B.tmp deleted
C:\PROGRA~3\SPL8EF6.tmp deleted
C:\PROGRA~3\SPL925F.tmp deleted
C:\PROGRA~3\SPL9352.tmp deleted
C:\PROGRA~3\SPL9781.tmp deleted
C:\PROGRA~3\SPL9D1A.tmp deleted
C:\PROGRA~3\SPL9F1D.tmp deleted
C:\PROGRA~3\SPLA2AA.tmp deleted
C:\PROGRA~3\SPLA6AA.tmp deleted
C:\PROGRA~3\SPLA806.tmp deleted
C:\PROGRA~3\SPLAD8.tmp deleted
C:\PROGRA~3\SPLAF9B.tmp deleted
C:\PROGRA~3\SPLB05A.tmp deleted
C:\PROGRA~3\SPLB562.tmp deleted
C:\PROGRA~3\SPLBE2.tmp deleted
C:\PROGRA~3\SPLBE7B.tmp deleted
C:\PROGRA~3\SPLBED.tmp deleted
C:\PROGRA~3\SPLC0FC.tmp deleted
C:\PROGRA~3\SPLC51A.tmp deleted
C:\PROGRA~3\SPLDA86.tmp deleted
C:\PROGRA~3\SPLE050.tmp deleted
C:\PROGRA~3\SPLE1E5.tmp deleted
C:\PROGRA~3\SPLE24A.tmp deleted
C:\PROGRA~3\SPLE668.tmp deleted
C:\PROGRA~3\SPLF72A.tmp deleted
C:\PROGRA~3\Avg_Update_0215tb deleted
C:\PROGRA~3\Avg_Update_0814tb deleted
C:\PROGRA~3\Avg_Update_1214tb deleted
C:\PROGRA~3\AVG Secure Search deleted
C:\PROGRA~3\AVG SafeGuard toolbar deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Brad\AppData\Local\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\Local\AVG Secure Search deleted
C:\Users\Susan\AppData\Local\AVG SafeGuard toolbar deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\SearchProtect deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\Users\Brad\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Users\Susan\AppData\LocalLow\Conduit deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Windows\wininit.ini deleted
C:\components deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
"C:\Windows\Installer\380000a8.msi" deleted
"C:\PROGRA~2\AVG SafeGuard toolbar\vprot.exe" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.7.0\avgdttbx.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.7.0\SiteSafety.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.7.0\log4cplusU.dll" deleted
"C:\PROGRA~2\AVG SafeGuard toolbar" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.7.0" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.7.0" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.7.0" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [07/17/2015 11:02 AM]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [07/17/2015 11:02 AM]
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.134
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bopakagnckmlgajfccecajhnimjiiedh - No path found[]
fheoggkfdfchfphceeifdbepaooicaho - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx[07/03/2015 03:26 PM]
SiteAdvisor - Brad\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
Chrome Hotword Shared Module - Brad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
SiteAdvisor - Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
Chrome Hotword Shared Module - Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
==== Chromium Startpages ======================
C:\Users\Brad\AppData\Local\Google\Chrome\User Data\Default\Preferences
gA=="},"net":{"http_server_properties":{"servers":{"accounts.google.com:443":{"supports_spdy":true},"ad.doubleclick.net:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}]},"apis.google.com:443":{"supports_spdy":true},"chrome.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"clickserve.dartsearch.net:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"clients1.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":20688},"supports_spdy":true},"clients2.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"clients2.googleusercontent.com:443":{"supports_spdy":true},"clients4.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"code.jquery.com:443":{"supports_spdy":true},"fonts.googleapis.com:443":{"supports_spdy":true},"fonts.gstatic.com:443":{"supports_spdy":true},"googleads.g.doubleclick.net:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":15655},"supports_spdy":true},"i.ytimg.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"oauth.googleusercontent.com:443":{"supports_spdy":true},"s.ytimg.com:443":{"supports_spdy":true},"s.ytimg.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"ssl.google-analytics.com:443":{"supports_spdy":true},"ssl.gstatic.com:443":{"supports_spdy":true},"www.facebook.com:443":{"supports_spdy":true},"www.google.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":63243},"supports_spdy":true},"www.google.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.googleadservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}]},"www.googleapis.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"www.gstatic.com:443":{"supports_spdy":true},"www.youtube.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"www.youtube.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]}},"supports_quic":{"address":"10.0.1.6","used_quic":true},"version":3}},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":26,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","per_host_zoom_levels":{}},"protection":{"macs":{}},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13080691119676731"},"sync_promo":{"show_on_first_run_allowed":false},"translate_blocked_languages":["en"],"translate_whitelists":{}}
4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/gcm","https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/chromenow/v1/*","https://*.googleapis.com/gcm/*","https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\43.0.2357.130\\resources\\google_now","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"x","commands":{},"content_settings":[],"creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13080691147348230","lastpingday":"13080639603922106","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","manifest_version":2,"name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"homepage":"http://www.google.com/","homepage_is_newtabpage":false,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"5018BC1C1EF1C0E64A6F1F6D0A68BEED2B0CD66F8C3C82FF16161D42F32A69B9"},"default_search_provider":{"keyword":"49471F96B3396AE687DBDEBEF3CA5DC035E3FF98326228B03B48FABA4A9024B4","name":"C26108C4BC08FE6B3154A5BBF50FF7E273EFB2B05B1D9EDB484D45DB43AAF69F","search_url":"D4B509E7C932601CF5DFD3D483F7FAF2A4370BABD7C103657D2CF414646E2F53"},"default_search_provider_data":{"template_url_data":"20F43C967765560E2E58F50F5AE5408D3FFA9DDB98F1B87A1B0C7F28DD218C63"},"extensions":{"settings":{"aapocclcgogkmnckokdopfmhonfmgoek":"3E1FD65B552F6EEBE25B7DF1493E8E3593A1ECBAEBC96978D78A5090F2D6D554","ahfgeienlihckogmohjhadlkjgocpleb":"75F1D1C3D09F0CBC6CA92C68110060A4BC2C33C33CB305C63AE05A207F3ACB4B","aohghmighlieiainnegkcijnfilokake":"4E8EE6DA77DD7690A51F09145F46B5C62BB8FDDA5086C8FB95C6B96B6836B304","apdfllckaahabafndbhieahigkjlhalf":"B5C0A60F78512AC9863A13F44D5FB1502C33C12D0C3642C83CD2E98E701BBA8A","bepbmhgboaologfdajaanbcjmnhjmhfn":"23531ECA5771AEE134A887310BB494119D547B3E5EAFB0C1E7AD473DF7A4CD6C","blpcfgokakmgnkcojhhkbfbldkacnbeo":"FFF59095E4CF1EC3DE43D701D7595A783332331CFB5E2F745AD5D224138518E8","coobgpohoikkiipiblmjeljniedjpjpf":"1915BC813CFEF0575F8F8744802979D94B4AEF2482C87B4491E4F944A3E472F1","eemcgdkfndhakfknompkggombfjjjeno":"0F72B349A220A056D545120B58F523C42DDD294FFBCB5A965B07025980F3258A","ennkphjdgehloodpbhlhldgbnhmacadg":"56F0EF4E0B79504D0D681399F3B96989AF753E58EEFBD12628B3F54D20B1FA90","felcaaldnbdncclmgdcncolpebgiejap":"F50B1CD0E600543194BA33C14CEF2B345B08DF92E077916AB3135D9A726C7679","fheoggkfdfchfphceeifdbepaooicaho":"F576A74EBA6DFA8BF09208447113BD0EDBA82BEB30859D5589796F6E9F617574","gfdkimpbcpahaombhbimeihdjnejgicl":"83D0767B66E9CEFA27FF2C06BC684FE26E65F47555D1DD7DF53A0BDC11B609BD","kdfbddbdpnahdahmamlolacimfdbeckk":"923550FED8BBAEF308692E775E05086641997C9341DC2340007E56E662AFA09E","kmendfapggjehodndflmmgagdbamhnfd":"08E02E9C96055F2F245EB89A7D02E37965E3308EBE8BC31BB9E02120A3635BB7","lccekmodgklaepjeofjdjpbminllajkg":"BEA720E74535B8241216522E1B95C5BE12DF47259AF68620A431DB427E3B7228","mfehgcgbbipciphmccgaenjidiccnmng":"0CF158F643B105E329A630B09765D4F030BCC56D7C4E019DA202761EE32CD227","mgndgikekgjfcpckkfioiadnlibdjbkf":"F5F4B732ADE33F7213F7341972C5C6423F5147A3F12A04B0E5D2650371711F33","mhjfbmdgcfjbbpaeojofohoefgiehjai":"0783442B56F3B9A3F30200733CD1688E9BBFA1B183B0E72F12FAC7D4C28409EC","nbpagnldghgfoolbancepceaanlmhfmd":"7D48FEB7C0B5FA4A75EF151F90FD93E6E3F510406BD71F20F213EF9149BCDE8E","neajdppkdcdipfabeoofebfddakdcjhd":"98EAA3C08AC736B414D2974F52D4B4F0BCCE345F08BD3865A47CB1B8CEE9D9FD","nkeimhogjdpnpccoofpliimaahmaaome":"2E6C5C9796F6C7B00DB41B614F61318AA3B90332DB1F2907C77211175BEC73D7","nmmhkkegccagdldgiimedpiccmgmieda":"63EA7240C67A5AAB0490C300770B0F79DE7D07BF9F13F91E3C46CBB8D0550456","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"F6A3522BF91C8BB6844C90CC2906604D3E02250A73EE1CE03910ACC804F29275","pjkljhegncpnkpknbcohdijeoejaedia":"F1D9EC33D5348569EBD99EE9E5ADC00C67686AD63384A59C1D71D9ABFB1C95EF"}},"google":{"services":{"last_username":"E6EC875357AA69944727B3DF3711CB6902E5C6036E975A8C8151C55F2DC09312","username":"7EA5BEEFA078D61FBE02674521DD4B9CE8B43C8919A170BF5124615B57D37C18"}},"homepage":"4763F61762A9DF7A173F631AD9D94796DF7FC726AA70525EB26C46FAC2442BA8","homepage_is_newtabpage":"8A80439F2A20EFF9A8E906840E33DBF8BEC3F77F701A97617C00CF404B51C60F","pinned_tabs":"A5ECFD5BED09DFC68190F9386F7696F7A8BA707E53D6B924FBB94EBFE9C28465","prefs":{"preference_reset_time":"DD86EF8C5CC1B6A2AF27012B0BAAEF59C23BFC66705FD93687635E1CC8DCCD76"},"profile":{"reset_prompt_memento":"A7ABABD7C1413F8995199292D0D366FEF195B89FCA264D39416AB39847293883"},"safebrowsing":{"incidents_sent":"581884AD9D14698E59878DD36B4F83C8656BD8C4F69A388EAEB8D9A115155D91"},"search_provider_overrides":"CD8B3C609B6B4BBD9717150A0D7D0216B0CCA0FE37FE09A3008B9F3EE478637F","session":{"restore_on_startup":"23BF652C9501560F45582686F6F2E2AA464E37B03FE671CFB8DC53D6A5FB9CBC","startup_urls":"9F9F2B1A27599C56D11654E02AEC1D69ED3614DF7BF47CB4637F769CD736839E"},"software_reporter":{"prompt_reason":"4508192BE3B1A4FA46AAECB27ED8D607AEB2D3612E890B3706319D980AD95632","prompt_seed":"4E0C33E71554BD320206C3C7910F9F7C17AA22C127F6A80493D430851604F05C","prompt_version":"6BB29AF9C6D0C8BCEC8080157A14E0F14DB9DE8743A550F1988EE508FD114438"},"sync":{"remaining_rollback_tries":"75D36D26DB7CF1E81A91584D30AFF2802D014FFF06C8A51FC12D0D4863BCAB1D"}},"super_mac":"EF75847E432177F9A97E01507619991C1675869493E0337DAE773EC8789971D6"},"session":{"restore_on_startup":4,"startup_urls":["http://www.google.com/"]}}
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Preferences
_OUFUKU\",\"vendor_id\":\"69\",\"width_microns\":148000},{\"custom_display_name\":\"Comm. Env. #10\",\"height_microns\":241300,\"name\":\"NA_NUMBER_10\",\"vendor_id\":\"20\",\"width_microns\":104700},{\"custom_display_name\":\"DL Env.\",\"height_microns\":220000,\"name\":\"ISO_DL\",\"vendor_id\":\"27\",\"width_microns\":110000},{\"custom_display_name\":\"Choukei 3 120x235mm\",\"height_microns\":235000,\"name\":\"JPN_CHOU3\",\"vendor_id\":\"73\",\"width_microns\":120000},{\"custom_display_name\":\"Choukei 4 90x205mm\",\"height_microns\":205000,\"name\":\"JPN_CHOU4\",\"vendor_id\":\"74\",\"width_microns\":90000},{\"custom_display_name\":\"Youkei 4 105x235mm\",\"height_microns\":235000,\"name\":\"JPN_YOU4\",\"vendor_id\":\"91\",\"width_microns\":105000},{\"custom_display_name\":\"Youkei 6 98x190mm\",\"height_microns\":190000,\"name\":\"NA_MONARCH\",\"vendor_id\":\"126\",\"width_microns\":98000},{\"custom_display_name\":\"Disc tray J\",\"height_microns\":224800,\"vendor_id\":\"127\",\"width_microns\":130000},{\"custom_display_name\":\"11\\\"x17\\\" 279.4x431.8mm (Scaled)\",\"height_microns\":431800,\"name\":\"NA_LEDGER\",\"vendor_id\":\"3\",\"width_microns\":279400},{\"custom_display_name\":\"17\\\"x22\\\" 431.8x558.8mm (Scaled)\",\"height_microns\":558800,\"name\":\"NA_C\",\"vendor_id\":\"24\",\"width_microns\":431800},{\"custom_display_name\":\"A3 (Scaled)\",\"height_microns\":420000,\"name\":\"ISO_A3\",\"vendor_id\":\"8\",\"width_microns\":297000},{\"custom_display_name\":\"A3+ 13\\\"x19\\\" 33x48cm (Scaled)\",\"height_microns\":483000,\"vendor_id\":\"274\",\"width_microns\":329000},{\"custom_display_name\":\"A2 (Scaled)\",\"height_microns\":594000,\"name\":\"ISO_A2\",\"vendor_id\":\"66\",\"width_microns\":420000},{\"custom_display_name\":\"B4 (Scaled)\",\"height_microns\":364000,\"name\":\"JIS_B4\",\"vendor_id\":\"12\",\"width_microns\":257000},{\"custom_display_name\":\"B3 (Scaled)\",\"height_microns\":515000,\"name\":\"JIS_B3\",\"vendor_id\":\"257\",\"width_microns\":364000},{\"custom_display_name\":\"10\\\"x12\\\" 25x30cm (Scaled)\",\"height_microns\":304800,\"vendor_id\":\"297\",\"width_microns\":254000},{\"custom_display_name\":\"14\\\"x17\\\" 36x43cm (Scaled)\",\"height_microns\":431800,\"vendor_id\":\"296\",\"width_microns\":355600}]},\"page_orientation\":{\"option\":[{\"is_default\":true,\"type\":\"PORTRAIT\"},{\"type\":\"LANDSCAPE\"},{\"type\":\"AUTO\"}]},\"supported_content_type\":[{\"content_type\":\"application/pdf\"}]},\"version\":\"1.0\"},\"mediaSize\":{\"custom_display_name\":\"Letter 8.5\\\"x11\\\" 22x28cm\",\"height_microns\":279400,\"is_default\":true,\"name\":\"NA_LETTER\",\"vendor_id\":\"1\",\"width_microns\":215900},\"vendorOptions\":{},\"selectedDestinationExtensionId\":\"\",\"selectedDestinationExtensionName\":\"\"}","savePath":"C:\\Users\\Susan\\Documents"}},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]abc.go.com,*":{"setting":1},"https://[*.]www.youtube.com:443,*":{"setting":1}},"geolocation":{"http://www.competitivecyclist.com:80,http://www.competitivecyclist.com:80":{"last_used":1433362659.090145,"setting":1},"http://www.food.com:80,http://www.food.com:80":{"setting":2}},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{"*,*":{"per_resource":{"npsitesafety.dll":1}}},"popups":{"[*.]www.ilga.gov,*":{"setting":1},"https://[*.]member.cvty.com:443,*":{"setting":1}},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}},"[*.]abc.go.com,*":{"fullscreen":1},"[*.]www.ilga.gov,*":{"popups":1},"https://[*.]member.cvty.com:443,*":{"popups":1},"https://[*.]www.youtube.com:443,*":{"fullscreen":1}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","password_manager_groups_for_domains":[5,4,null,null,null,null,6],"per_host_zoom_levels":{}},"protection":{"macs":{}},"savefile":{"default_directory":"C:\\Users\\Susan\\Downloads"},"selectfile":{"last_directory":"C:\\Users\\Susan\\Downloads"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13043109225341891","urls_to_restore_on_startup":null},"settings":{"privacy":{"drm_salt":"777B07F264780AA0242A3222D0A7C54E461EFA065B690525556756CAC5912CB7"}},"sync":{"suppress_start":true},"sync_promo":{"show_on_first_run_allowed":false},"translate_accepted_count":{"es":0},"translate_blocked_languages":["en"],"translate_denied_count":{"es":1},"translate_last_denied_time":1427065162809.984,"translate_whitelists":{},"webkit":{"webprefs":{"default_fixed_font_size":17,"default_font_size":20}},"zerosuggest":{"cachedresults":""}}
_OUFUKU\",\"vendor_id\":\"69\",\"width_microns\":148000},{\"custom_display_name\":\"Comm. Env. #10\",\"height_microns\":241300,\"name\":\"NA_NUMBER_10\",\"vendor_id\":\"20\",\"width_microns\":104700},{\"custom_display_name\":\"DL Env.\",\"height_microns\":220000,\"name\":\"ISO_DL\",\"vendor_id\":\"27\",\"width_microns\":110000},{\"custom_display_name\":\"Choukei 3 120x235mm\",\"height_microns\":235000,\"name\":\"JPN_CHOU3\",\"vendor_id\":\"73\",\"width_microns\":120000},{\"custom_display_name\":\"Choukei 4 90x205mm\",\"height_microns\":205000,\"name\":\"JPN_CHOU4\",\"vendor_id\":\"74\",\"width_microns\":90000},{\"custom_display_name\":\"Youkei 4 105x235mm\",\"height_microns\":235000,\"name\":\"JPN_YOU4\",\"vendor_id\":\"91\",\"width_microns\":105000},{\"custom_display_name\":\"Youkei 6 98x190mm\",\"height_microns\":190000,\"name\":\"NA_MONARCH\",\"vendor_id\":\"126\",\"width_microns\":98000},{\"custom_display_name\":\"Disc tray J\",\"height_microns\":224800,\"vendor_id\":\"127\",\"width_microns\":130000},{\"custom_display_name\":\"11\\\"x17\\\" 279.4x431.8mm (Scaled)\",\"height_microns\":431800,\"name\":\"NA_LEDGER\",\"vendor_id\":\"3\",\"width_microns\":279400},{\"custom_display_name\":\"17\\\"x22\\\" 431.8x558.8mm (Scaled)\",\"height_microns\":558800,\"name\":\"NA_C\",\"vendor_id\":\"24\",\"width_microns\":431800},{\"custom_display_name\":\"A3 (Scaled)\",\"height_microns\":420000,\"name\":\"ISO_A3\",\"vendor_id\":\"8\",\"width_microns\":297000},{\"custom_display_name\":\"A3+ 13\\\"x19\\\" 33x48cm (Scaled)\",\"height_microns\":483000,\"vendor_id\":\"274\",\"width_microns\":329000},{\"custom_display_name\":\"A2 (Scaled)\",\"height_microns\":594000,\"name\":\"ISO_A2\",\"vendor_id\":\"66\",\"width_microns\":420000},{\"custom_display_name\":\"B4 (Scaled)\",\"height_microns\":364000,\"name\":\"JIS_B4\",\"vendor_id\":\"12\",\"width_microns\":257000},{\"custom_display_name\":\"B3 (Scaled)\",\"height_microns\":515000,\"name\":\"JIS_B3\",\"vendor_id\":\"257\",\"width_microns\":364000},{\"custom_display_name\":\"10\\\"x12\\\" 25x30cm (Scaled)\",\"height_microns\":304800,\"vendor_id\":\"297\",\"width_microns\":254000},{\"custom_display_name\":\"14\\\"x17\\\" 36x43cm (Scaled)\",\"height_microns\":431800,\"vendor_id\":\"296\",\"width_microns\":355600}]},\"page_orientation\":{\"option\":[{\"is_default\":true,\"type\":\"PORTRAIT\"},{\"type\":\"LANDSCAPE\"},{\"type\":\"AUTO\"}]},\"supported_content_type\":[{\"content_type\":\"application/pdf\"}]},\"version\":\"1.0\"},\"mediaSize\":{\"custom_display_name\":\"Letter 8.5\\\"x11\\\" 22x28cm\",\"height_microns\":279400,\"is_default\":true,\"name\":\"NA_LETTER\",\"vendor_id\":\"1\",\"width_microns\":215900},\"vendorOptions\":{},\"selectedDestinationExtensionId\":\"\",\"selectedDestinationExtensionName\":\"\"}","savePath":"C:\\Users\\Susan\\Documents"}},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]abc.go.com,*":{"setting":1},"https://[*.]www.youtube.com:443,*":{"setting":1}},"geolocation":{"http://www.competitivecyclist.com:80,http://www.competitivecyclist.com:80":{"last_used":1433362659.090145,"setting":1},"http://www.food.com:80,http://www.food.com:80":{"setting":2}},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{"*,*":{"per_resource":{"npsitesafety.dll":1}}},"popups":{"[*.]www.ilga.gov,*":{"setting":1},"https://[*.]member.cvty.com:443,*":{"setting":1}},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}},"[*.]abc.go.com,*":{"fullscreen":1},"[*.]www.ilga.gov,*":{"popups":1},"https://[*.]member.cvty.com:443,*":{"popups":1},"https://[*.]www.youtube.com:443,*":{"fullscreen":1}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","password_manager_groups_for_domains":[5,4,null,null,null,null,6],"per_host_zoom_levels":{}},"protection":{"macs":{}},"savefile":{"default_directory":"C:\\Users\\Susan\\Downloads"},"selectfile":{"last_directory":"C:\\Users\\Susan\\Downloads"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13043109225341891","urls_to_restore_on_startup":null},"settings":{"privacy":{"drm_salt":"777B07F264780AA0242A3222D0A7C54E461EFA065B690525556756CAC5912CB7"}},"sync":{"suppress_start":true},"sync_promo":{"show_on_first_run_allowed":false},"translate_accepted_count":{"es":0},"translate_blocked_languages":["en"],"translate_denied_count":{"es":1},"translate_last_denied_time":1427065162809.984,"translate_whitelists":{},"webkit":{"webprefs":{"default_fixed_font_size":17,"default_font_size":20}},"zerosuggest":{"cachedresults":""}}
B0B59B6DBD77A93150F4C22C0117FA"},"session":{"restore_on_startup":4,"startup_urls":["http://www.google.com/"]},"software_reporter":{"prompt_reason":0,"prompt_seed":"20150601","prompt_version":"3.21.0"},"sync":{"remaining_rollback_tries":0}}
==== Chromium Fix ======================
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services1.capitalone.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services1.capitalone.com_0.localstorage-journal deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services2.capitalone.com_0.localstorage deleted successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_services2.capitalone.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://mysearch.avg.com?cid={A0743...coid=avgtbavg&cmpid=0715tb&pr=sa&d=2014-02-08 12:39:16&v=18.7.0.147&pid=safeguard&sg=0&sap=hp"
"Search Bar"="http://www.google.com/ie"
"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{EC1C4567-00F3-43DD-AFD4-1B0D20F99129}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC1C4567-00F3-43DD-AFD4-1B0D20F99129}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchMigratedDefaultURL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
{49606DC7-976D-4030-A74E-9FB5C842FA68} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
HKEY_USERS\S-1-5-21-2651812893-2032532347-2012303543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{49606DC7-976D-4030-A74E-9FB5C842FA68} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\avg@toolbar deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5392EF0065BF0144BAF56D7EC071172D deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{00FE2935-FB56-4410-AB5F-D6E70C1771D2} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2FD94FBC-07AE-475C-B522-BFE899B9048E} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\5392EF0065BF0144BAF56D7EC071172D deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSystemDetect deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Brad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Brad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Susan\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Brad\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=1681 folders=582 356514729 bytes)
==== Empty Temp Folders ======================
C:\Users\Brad\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Susan\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Susan\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
- Mar 8, 2013
- 22,627
Let's use FRST again:
Scan with Farbar Recovery Scan Tool
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
- Right-click on
icon and select
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File). - Make sure that Addition option is checked.
- Press Scan button and wait.
- The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Susan (administrator) on SUSAN-PC on 20-07-2015 12:09:46
Running from C:\Users\Susan\Downloads
Loaded Profiles: Susan (Available Profiles: Susan & Brad)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\System32\spool\drivers\x64\3\dleeserv.exe
( ) C:\Windows\System32\dleecoms.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.5.495.0\McCSPServiceHost.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Dell V715w\dleemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Apple Inc.) C:\Program Files (x86)\AirPort\APAgent.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [dleemon.exe] => C:\Program Files (x86)\Dell V715w\dleemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [616272 2015-05-13] (McAfee, Inc.)
HKLM-x32\...\Run: [AirPort Base Station Agent] => C:\Program Files (x86)\AirPort\APAgent.exe [771360 2009-11-11] (Apple Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
HKLM-x32\...\runonceex: [Flags] =>
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\822\G2AWinLogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\tray.exe [1010008 2015-04-08] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\...\RunOnce: [{90140000-003D-0000-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.)
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKLM-x32 -> DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-08] (Sun Microsystems, Inc.)
BHO-x32: Dell Toolbar -> {09B71986-2AC5-482d-B6CB-42EA34F4F85B} -> C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12] (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12] (Sun Microsystems, Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM-x32 - Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB
Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.7.0\ViProtocol.dll No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-05-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-05-13] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{328F6F43-F816-42D3-BAA6-2E836359615A}: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{F73A8E74-E14D-46C1-9C39-59A51F440F27}: [DhcpNameServer] 10.0.1.1
FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2012-02-08] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll No File
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2012-01-05] (GARMIN Corp.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-03-12] (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-05-17]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-05-17]
Chrome:
=======
CHR Profile: C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-13]
CHR Extension: (Google Search) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06]
CHR Extension: (SiteAdvisor) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Google Wallet) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-15]
CHR Extension: (Gmail) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [232152 2015-05-20] (Dell Inc.)
R2 dleeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dleeserv.exe [45224 2010-05-21] ()
R2 dlee_device; C:\Windows\system32\dleecoms.exe [1052328 2010-05-21] ( )
R2 dlee_device; C:\Windows\SysWOW64\dleecoms.exe [598696 2010-05-21] ( )
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [708616 2015-04-08] (Garmin Ltd. or its subsidiaries)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-07-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [754280 2015-05-13] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.495.0\McCSPServiceHost.exe [207344 2015-06-04] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [609592 2015-05-05] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-04-08] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-05-14] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2015-04-08] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [68784 2015-04-08] (McAfee, Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [198448 2015-04-27] (McAfee, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-20] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R2 McPvDrv; C:\Windows\System32\drivers\McPvDrv.sys [76064 2015-05-08] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [402888 2015-04-08] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [338272 2015-04-08] (McAfee, Inc.)
R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [101872 2015-04-08] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [488000 2015-04-08] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864200 2015-04-08] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [483240 2015-03-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2015-03-26] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [335944 2015-04-08] (McAfee, Inc.)
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-19 18:08 - 2015-07-19 18:09 - 00292648 _____ C:\Windows\Minidump\071915-41121-01.dmp
2015-07-19 18:04 - 2015-07-19 18:04 - 00284392 _____ C:\Windows\Minidump\071915-40887-01.dmp
2015-07-19 17:58 - 2015-07-19 17:58 - 00284392 _____ C:\Windows\Minidump\071915-17612-02.dmp
2015-07-19 17:52 - 2015-07-19 17:52 - 00284392 _____ C:\Windows\Minidump\071915-18564-01.dmp
2015-07-19 17:47 - 2015-07-19 17:47 - 00284392 _____ C:\Windows\Minidump\071915-17378-01.dmp
2015-07-19 17:42 - 2015-07-19 17:42 - 00284392 _____ C:\Windows\Minidump\071915-17596-01.dmp
2015-07-19 17:36 - 2015-07-19 17:36 - 00286488 _____ C:\Windows\Minidump\071915-18423-01.dmp
2015-07-19 14:44 - 2015-07-19 14:45 - 00284392 _____ C:\Windows\Minidump\071915-34913-01.dmp
2015-07-19 14:40 - 2015-07-19 14:40 - 00286488 _____ C:\Windows\Minidump\071915-34086-01.dmp
2015-07-19 14:32 - 2015-07-19 14:32 - 00286448 _____ C:\Windows\Minidump\071915-14648-01.dmp
2015-07-19 14:28 - 2015-07-19 14:28 - 00286856 _____ C:\Windows\Minidump\071915-15693-01.dmp
2015-07-19 14:23 - 2015-07-19 14:23 - 00284392 _____ C:\Windows\Minidump\071915-14383-01.dmp
2015-07-19 14:18 - 2015-07-19 14:18 - 00284392 _____ C:\Windows\Minidump\071915-15303-01.dmp
2015-07-19 13:56 - 2015-07-19 13:43 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-07-19 13:44 - 2015-07-19 14:26 - 00037501 _____ C:\zoek-results.log
2015-07-19 13:43 - 2015-07-19 13:54 - 00000000 ____D C:\zoek_backup
2015-07-19 13:39 - 2015-07-19 13:39 - 01308672 _____ C:\Users\Susan\Desktop\zoek.exe
2015-07-18 20:01 - 2015-07-18 20:01 - 00286696 _____ C:\Windows\Minidump\071815-14539-01.dmp
2015-07-18 19:53 - 2015-07-18 19:53 - 00293352 _____ C:\Windows\Minidump\071815-16723-01.dmp
2015-07-18 13:18 - 2015-07-20 12:10 - 00024689 _____ C:\Users\Susan\Downloads\FRST.txt
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\royal_blood_digital_album
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\Hush Or Howl - MP3
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\7 Cities
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\12_25133_JohnnyWinter
2015-07-18 13:17 - 2014-02-04 13:45 - 00000000 ____D C:\Users\Susan\Downloads\Lost In The Dream
2015-07-18 13:15 - 2015-07-18 13:15 - 76796180 _____ C:\Users\Susan\Downloads\royal_blood_digital_album.zip
2015-07-18 13:13 - 2015-07-18 13:14 - 171346407 _____ C:\Users\Susan\Downloads\SC310.zip
2015-07-18 13:12 - 2015-07-18 13:13 - 71940031 _____ C:\Users\Susan\Downloads\blackpistolfire_hushorhowl_mp3.zip
2015-07-18 13:11 - 2015-07-18 13:11 - 93077687 _____ C:\Users\Susan\Downloads\7 Cities.zip
2015-07-18 13:08 - 2015-07-18 13:09 - 83367713 _____ C:\Users\Susan\Downloads\12_25133_JohnnyWinter.zip
2015-07-18 08:53 - 2015-07-18 08:53 - 00284392 _____ C:\Windows\Minidump\071815-17300-01.dmp
2015-07-18 08:48 - 2015-07-18 08:48 - 00284392 _____ C:\Windows\Minidump\071815-18018-01.dmp
2015-07-18 08:41 - 2015-07-18 08:41 - 00284392 _____ C:\Windows\Minidump\071815-18033-01.dmp
2015-07-18 08:36 - 2015-07-18 08:36 - 00293336 _____ C:\Windows\Minidump\071815-18657-01.dmp
2015-07-18 03:42 - 2015-07-18 03:42 - 00284392 _____ C:\Windows\Minidump\071815-68328-01.dmp
2015-07-18 03:36 - 2015-07-18 03:36 - 00284392 _____ C:\Windows\Minidump\071815-68500-01.dmp
2015-07-18 03:30 - 2015-07-18 03:30 - 00284392 _____ C:\Windows\Minidump\071815-68968-01.dmp
2015-07-17 18:35 - 2015-07-09 12:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-17 18:35 - 2015-07-09 12:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-17 18:35 - 2015-07-09 12:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-17 18:35 - 2015-07-09 12:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-17 18:35 - 2015-07-09 12:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-17 18:35 - 2015-06-26 21:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-17 18:35 - 2015-06-26 21:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-17 18:35 - 2015-06-26 20:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-17 18:35 - 2015-06-26 20:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-17 18:35 - 2015-06-25 03:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-17 18:34 - 2015-07-09 12:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-17 18:34 - 2015-07-09 12:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-17 18:34 - 2015-07-09 12:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-17 18:34 - 2015-07-02 16:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-17 18:34 - 2015-07-02 16:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-17 18:34 - 2015-07-02 15:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-17 18:34 - 2015-07-02 15:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-17 18:34 - 2015-07-02 15:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-17 18:34 - 2015-07-02 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-17 18:34 - 2015-07-02 15:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-17 18:34 - 2015-07-02 15:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-17 18:34 - 2015-07-02 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-17 18:34 - 2015-07-02 14:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-17 18:34 - 2015-07-02 14:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-17 18:34 - 2015-07-02 13:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-17 18:34 - 2015-06-25 13:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-17 18:34 - 2015-06-25 12:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-17 18:34 - 2015-06-20 15:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-17 18:34 - 2015-06-20 14:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-17 18:34 - 2015-06-20 14:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-17 18:34 - 2015-06-20 14:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-17 18:34 - 2015-06-20 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-17 18:34 - 2015-06-20 14:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-17 18:34 - 2015-06-20 14:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-17 18:34 - 2015-06-20 14:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-17 18:34 - 2015-06-20 14:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-17 18:34 - 2015-06-20 14:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-17 18:34 - 2015-06-20 14:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-17 18:34 - 2015-06-20 14:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-17 18:34 - 2015-06-20 14:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-17 18:34 - 2015-06-20 14:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-17 18:34 - 2015-06-20 14:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-17 18:34 - 2015-06-20 14:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-17 18:34 - 2015-06-20 14:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-17 18:34 - 2015-06-20 13:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-17 18:34 - 2015-06-20 13:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-17 18:34 - 2015-06-20 13:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-17 18:34 - 2015-06-20 13:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-17 18:34 - 2015-06-20 13:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-17 18:34 - 2015-06-20 13:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-17 18:34 - 2015-06-19 13:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-17 18:34 - 2015-06-19 13:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-17 18:34 - 2015-06-19 13:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-17 18:34 - 2015-06-19 13:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-17 18:34 - 2015-06-19 13:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-17 18:34 - 2015-06-19 13:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-17 18:34 - 2015-06-19 13:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-17 18:34 - 2015-06-19 13:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-17 18:34 - 2015-06-19 13:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-17 18:34 - 2015-06-19 13:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-17 18:34 - 2015-06-19 12:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-17 18:34 - 2015-06-19 12:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-17 18:34 - 2015-06-19 12:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-17 18:34 - 2015-06-19 12:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-17 18:34 - 2015-06-19 12:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-17 18:34 - 2015-06-19 12:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-17 18:34 - 2015-06-19 12:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-17 18:34 - 2015-06-19 12:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-17 18:34 - 2015-06-19 12:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-17 18:34 - 2015-06-17 12:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-17 18:34 - 2015-06-17 12:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-17 18:34 - 2015-06-01 19:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-17 18:34 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-17 18:34 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-17 18:31 - 2015-07-20 12:09 - 00000000 ____D C:\Users\Susan\Downloads\FRST-OlderVersion
2015-07-17 18:28 - 2015-07-17 18:28 - 00286872 _____ C:\Windows\Minidump\071715-40825-01.dmp
2015-07-17 12:22 - 2015-07-17 12:23 - 00287112 _____ C:\Windows\Minidump\071715-41090-01.dmp
2015-07-17 12:16 - 2015-07-17 12:16 - 00293328 _____ C:\Windows\Minidump\071715-20061-01.dmp
2015-07-17 11:04 - 2015-07-17 11:04 - 00293328 _____ C:\Windows\Minidump\071715-28501-01.dmp
2015-07-16 20:23 - 2015-07-16 20:23 - 00286208 _____ C:\Windows\Minidump\071615-25740-01.dmp
2015-07-16 20:21 - 2015-07-01 15:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-16 20:21 - 2015-07-01 15:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-16 20:21 - 2015-07-01 15:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-16 20:21 - 2015-07-01 15:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-16 20:21 - 2015-07-01 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-16 20:21 - 2015-07-01 15:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-16 20:21 - 2015-07-01 15:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-16 20:21 - 2015-07-01 15:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-16 20:21 - 2015-07-01 15:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-16 20:21 - 2015-07-01 15:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-16 20:21 - 2015-07-01 15:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-16 20:21 - 2015-07-01 15:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-16 20:21 - 2015-07-01 15:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-16 20:21 - 2015-07-01 14:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-16 20:21 - 2015-07-01 14:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-16 20:21 - 2015-07-01 14:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-16 20:20 - 2015-07-04 13:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-16 20:20 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-16 20:20 - 2015-06-15 16:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-16 20:20 - 2015-06-15 16:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-16 20:20 - 2015-06-15 16:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-16 20:20 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-16 20:20 - 2015-06-15 16:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-16 20:20 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-16 20:20 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-16 20:20 - 2015-06-15 16:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-16 20:20 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-16 20:20 - 2015-06-11 12:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-16 20:20 - 2015-06-11 12:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-07-16 20:20 - 2015-06-11 12:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-07-16 20:19 - 2015-07-03 13:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-16 20:19 - 2015-07-03 12:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-16 20:19 - 2015-07-03 11:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-16 20:19 - 2015-07-03 11:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 20:11 - 2015-07-16 20:12 - 00284136 _____ C:\Windows\Minidump\071615-21387-01.dmp
2015-07-16 19:56 - 2015-07-16 19:56 - 00285600 _____ C:\Windows\Minidump\071615-36254-01.dmp
2015-07-16 19:14 - 2015-07-16 19:14 - 00286856 _____ C:\Windows\Minidump\071615-37830-01.dmp
2015-07-16 19:08 - 2015-07-16 19:08 - 00286872 _____ C:\Windows\Minidump\071615-38953-01.dmp
2015-07-16 19:04 - 2015-07-16 19:04 - 00301592 _____ C:\Windows\Minidump\071615-19110-01.dmp
2015-07-16 18:52 - 2015-07-16 18:53 - 00301640 _____ C:\Windows\Minidump\071615-20763-01.dmp
2015-07-15 18:02 - 2015-07-15 18:02 - 00295320 _____ C:\Windows\Minidump\071515-18798-01.dmp
2015-07-15 16:36 - 2015-07-19 18:08 - 557027137 _____ C:\Windows\MEMORY.DMP
2015-07-15 16:36 - 2015-07-19 18:08 - 00000000 ____D C:\Windows\Minidump
2015-07-15 16:36 - 2015-07-15 16:36 - 00293368 _____ C:\Windows\Minidump\071515-25022-01.dmp
2015-07-15 16:35 - 2015-05-08 01:42 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys
2015-07-15 16:34 - 2015-04-27 08:02 - 00198448 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-07-15 16:32 - 2015-07-15 16:32 - 00003064 _____ C:\Windows\System32\Tasks\McAfeeLogon
2015-07-10 19:12 - 2015-07-20 12:08 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-10 19:12 - 2015-07-10 19:12 - 00001108 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-10 19:12 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-10 19:12 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-10 19:12 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-10 19:11 - 2015-07-20 12:09 - 00000000 ____D C:\FRST
2015-07-10 19:10 - 2015-07-20 12:09 - 02135552 _____ (Farbar) C:\Users\Susan\Downloads\FRST64.exe
2015-07-10 19:10 - 2015-07-10 19:11 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Susan\Downloads\mbam-setup-2.1.8.1057.exe
2015-06-25 13:37 - 2015-07-10 18:59 - 00000000 __RSD C:\Users\Brad\Documents\McAfee Vaults
2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\McAfee File Lock
2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\GWX
2015-06-25 13:36 - 2015-06-25 13:36 - 00000000 ____D C:\Users\Brad\AppData\Local\Google
2015-06-25 10:51 - 2015-07-19 14:00 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-06-25 10:51 - 2015-06-25 10:51 - 00004030 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2015-06-25 10:51 - 2015-06-25 10:51 - 00003218 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\Program Files\Dell Support Center
2015-06-24 01:29 - 2015-06-24 01:29 - 01217192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL
2015-06-20 13:03 - 2015-06-20 13:03 - 00013018 _____ C:\Users\Susan\Downloads\tickets_676208.html
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-20 12:10 - 2013-05-17 16:35 - 00000000 __RSD C:\Users\Susan\Documents\McAfee Vaults
2015-07-20 12:09 - 2014-02-19 16:34 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce.job
2015-07-20 12:09 - 2012-09-06 16:13 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-20 12:09 - 2012-04-12 16:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-20 12:08 - 2012-02-11 14:15 - 00081384 _____ C:\ProgramData\dleescan.log
2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2015-07-20 12:08 - 2012-02-08 15:43 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2015-07-20 12:08 - 2012-02-08 15:24 - 01419010 _____ C:\Windows\WindowsUpdate.log
2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-19 18:12 - 2013-11-17 13:31 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-19 18:08 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-19 18:08 - 2009-07-13 23:51 - 00063946 _____ C:\Windows\setupact.log
2015-07-19 17:24 - 2014-10-23 19:00 - 00000000 ____D C:\Windows\system32\appmgmt
2015-07-19 17:24 - 2012-02-11 13:43 - 00000000 ____D C:\Users\Susan
2015-07-19 17:23 - 2013-05-17 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-07-19 14:09 - 2010-11-20 22:47 - 00598520 _____ C:\Windows\PFRO.log
2015-07-18 17:12 - 2013-01-03 17:30 - 00953344 ___SH C:\Users\Susan\Downloads\Thumbs.db
2015-07-18 17:12 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-18 14:07 - 2012-03-09 16:24 - 00000000 ____D C:\Users\Susan\Documents\Outlook Files
2015-07-18 04:08 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
2015-07-18 03:23 - 2009-07-13 23:45 - 00416368 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-18 03:21 - 2014-12-14 04:22 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-18 03:21 - 2014-05-06 18:48 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-18 03:21 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-18 03:01 - 2012-03-08 17:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-17 19:29 - 2012-09-06 16:14 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-17 18:42 - 2013-08-14 03:01 - 00000000 ____D C:\Windows\system32\MRT
2015-07-17 18:42 - 2013-04-15 12:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-17 12:19 - 2013-04-15 12:24 - 00000000 ____D C:\Users\Susan\AppData\Local\CrashDumps
2015-07-16 20:22 - 2014-02-19 16:34 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce
2015-07-16 20:22 - 2012-09-06 16:13 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 18:03 - 2009-07-14 00:08 - 00032574 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-15 16:34 - 2012-02-08 16:02 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-07-15 16:27 - 2012-04-12 16:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 16:27 - 2012-04-12 16:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 16:27 - 2012-02-08 15:27 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-14 07:08 - 2015-01-14 17:18 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 19:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PLA
2015-07-10 19:32 - 2005-01-01 16:51 - 00000000 ____D C:\Users\Susan\Desktop\MP3S
2015-07-10 19:02 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-10 19:01 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad
2015-07-10 19:00 - 2014-12-02 14:40 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-07-10 18:59 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-10 18:59 - 2015-03-16 19:31 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-10 18:59 - 2014-12-02 14:36 - 00000000 ____D C:\Users\Susan\Downloads\JDownloader1 Setup
2015-07-10 18:59 - 2014-08-13 10:48 - 00000000 ____D C:\Users\Susan\AppData\Local\JDownloader v2.0
2015-07-10 18:59 - 2014-06-01 16:12 - 00000000 ____D C:\Users\Susan\AppData\Local\Garmin
2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files\McAfee
2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files (x86)\McAfee.com
2015-07-10 18:59 - 2013-04-14 15:54 - 00000000 ____D C:\Users\Susan\AppData\Roaming\uTorrent
2015-07-10 18:59 - 2013-04-12 17:36 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Orbit
2015-07-10 18:59 - 2013-04-12 12:56 - 00000000 ____D C:\Users\Susan\AppData\Local\Applian
2015-07-10 18:59 - 2013-04-12 12:55 - 00000000 ____D C:\Users\Susan\AppData\Local\Jaksta_Technologies_Pty_L
2015-07-10 18:59 - 2012-11-12 16:27 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 18:59 - 2012-09-07 03:01 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Skype
2015-07-10 18:59 - 2012-09-06 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-10 18:59 - 2012-03-08 17:23 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Help
2015-07-10 18:59 - 2012-02-22 20:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-07-10 18:59 - 2012-02-13 12:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\V715w
2015-07-10 18:59 - 2012-02-11 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Nero_AG
2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ___RD C:\Users\Susan\Desktop\MySyncUPFiles
2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macrovision
2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ___RD C:\Users\Susan\Virtual Machines
2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ____D C:\Users\Susan\AppData\Local\VirtualStore
2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\system32\Macromed
2015-07-10 18:59 - 2010-11-21 02:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-07-10 18:58 - 2013-04-13 17:34 - 00000000 ____D C:\Users\Susan\AppData\Local\TechSmith
2015-07-10 18:58 - 2012-03-05 17:54 - 00000000 ____D C:\Users\Susan\Documents\Fax
2015-07-10 18:58 - 2012-02-21 07:50 - 00000000 ____D C:\Users\Susan\AppData\Roaming\SoftGrid Client
2015-07-10 18:58 - 2012-02-13 13:00 - 00000000 ____D C:\Users\Susan\AppData\Roaming\PCDr
2015-07-10 18:58 - 2012-02-11 16:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Intuit
2015-07-10 18:58 - 2012-02-11 14:02 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Adobe
2015-07-10 18:58 - 2012-02-11 13:44 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macromedia
2015-07-10 18:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration
2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\wdfp506
2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\DVDFab
2015-07-10 18:58 - 2007-07-07 12:09 - 00000000 ____D C:\Users\Susan\Documents\New CDs
2015-07-10 18:57 - 2013-04-16 15:10 - 00000000 ____D C:\Users\Susan\AppData\Local\Cyberlink
2015-07-10 18:57 - 2012-09-06 16:13 - 00000000 ____D C:\Users\Susan\AppData\Local\Google
2015-07-10 18:57 - 2012-04-13 16:27 - 00000000 ____D C:\Users\Susan\AppData\Local\Citrix
2015-07-10 18:57 - 2012-02-11 16:30 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Games
2015-07-10 18:57 - 2012-02-11 13:57 - 00000000 ____D C:\Users\Susan\AppData\Local\Dell
2015-07-10 18:49 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad\AppData\Local\SoftThinks
2015-07-03 08:43 - 2012-02-12 20:30 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 14:25 - 2009-07-14 00:13 - 00783424 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-01 14:24 - 2012-03-09 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Windows Live
2015-07-01 14:10 - 2015-02-13 04:03 - 00003820 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2015-07-01 14:09 - 2015-02-13 04:03 - 00000000 ____D C:\ProgramData\SupportAssistAgent
2015-06-25 13:41 - 2013-04-01 16:07 - 00000000 ____D C:\Users\Brad\AppData\Roaming\Apple Computer
2015-06-25 13:37 - 2013-04-01 16:07 - 00111840 _____ C:\Users\Brad\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-25 13:37 - 2013-04-01 16:07 - 00000000 ___RD C:\Users\Brad\Virtual Machines
2015-06-25 13:36 - 2013-04-01 16:07 - 00001379 _____ C:\Users\Brad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-25 10:51 - 2012-02-08 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-06-25 10:50 - 2012-02-13 13:00 - 00000000 ____D C:\ProgramData\PCDr
2015-06-23 13:30 - 2010-11-20 22:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Files in the root of some directories =======
2013-04-13 18:34 - 2013-04-15 19:29 - 0003584 _____ () C:\Users\Susan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2012-02-12 20:04 - 2013-04-12 03:00 - 0014932 _____ () C:\ProgramData\dlee.log
2012-03-04 19:20 - 2014-05-15 13:09 - 0001102 _____ () C:\ProgramData\dleeDiagnostics.log
2012-02-11 14:53 - 2014-05-12 13:06 - 0334944 _____ () C:\ProgramData\dleeJSW.log
2012-02-11 14:15 - 2015-07-20 12:08 - 0081384 _____ () C:\ProgramData\dleescan.log
2012-02-11 15:05 - 2012-02-11 15:05 - 0000252 _____ () C:\ProgramData\FastPics.log
2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2012-02-11 16:25 - 2015-02-22 18:41 - 0001095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-18 04:01
==================== End of log ============================
Ran by Susan (administrator) on SUSAN-PC on 20-07-2015 12:09:46
Running from C:\Users\Susan\Downloads
Loaded Profiles: Susan (Available Profiles: Susan & Brad)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\System32\spool\drivers\x64\3\dleeserv.exe
( ) C:\Windows\System32\dleecoms.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.5.495.0\McCSPServiceHost.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Dell V715w\dleemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Apple Inc.) C:\Program Files (x86)\AirPort\APAgent.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [dleemon.exe] => C:\Program Files (x86)\Dell V715w\dleemon.exe [770728 2011-01-23] ()
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [616272 2015-05-13] (McAfee, Inc.)
HKLM-x32\...\Run: [AirPort Base Station Agent] => C:\Program Files (x86)\AirPort\APAgent.exe [771360 2009-11-11] (Apple Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
HKLM-x32\...\runonceex: [Flags] =>
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\822\G2AWinLogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\tray.exe [1010008 2015-04-08] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\...\RunOnce: [{90140000-003D-0000-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.)
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKLM-x32 -> DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-08] (Sun Microsystems, Inc.)
BHO-x32: Dell Toolbar -> {09B71986-2AC5-482d-B6CB-42EA34F4F85B} -> C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12] (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12] (Sun Microsystems, Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM-x32 - Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB
Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.7.0\ViProtocol.dll No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-05-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-05-13] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{328F6F43-F816-42D3-BAA6-2E836359615A}: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{F73A8E74-E14D-46C1-9C39-59A51F440F27}: [DhcpNameServer] 10.0.1.1
FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2012-02-08] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll No File
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2012-01-05] (GARMIN Corp.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-03-12] (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-05-17]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-05-17]
Chrome:
=======
CHR Profile: C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-13]
CHR Extension: (Google Search) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06]
CHR Extension: (SiteAdvisor) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Google Wallet) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-15]
CHR Extension: (Gmail) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [232152 2015-05-20] (Dell Inc.)
R2 dleeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dleeserv.exe [45224 2010-05-21] ()
R2 dlee_device; C:\Windows\system32\dleecoms.exe [1052328 2010-05-21] ( )
R2 dlee_device; C:\Windows\SysWOW64\dleecoms.exe [598696 2010-05-21] ( )
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [708616 2015-04-08] (Garmin Ltd. or its subsidiaries)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-07-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [754280 2015-05-13] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.495.0\McCSPServiceHost.exe [207344 2015-06-04] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [609592 2015-05-05] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-04-08] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-05-14] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2015-04-08] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [68784 2015-04-08] (McAfee, Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [198448 2015-04-27] (McAfee, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-20] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R2 McPvDrv; C:\Windows\System32\drivers\McPvDrv.sys [76064 2015-05-08] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [402888 2015-04-08] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [338272 2015-04-08] (McAfee, Inc.)
R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [101872 2015-04-08] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [488000 2015-04-08] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864200 2015-04-08] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [483240 2015-03-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2015-03-26] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [335944 2015-04-08] (McAfee, Inc.)
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-19 18:08 - 2015-07-19 18:09 - 00292648 _____ C:\Windows\Minidump\071915-41121-01.dmp
2015-07-19 18:04 - 2015-07-19 18:04 - 00284392 _____ C:\Windows\Minidump\071915-40887-01.dmp
2015-07-19 17:58 - 2015-07-19 17:58 - 00284392 _____ C:\Windows\Minidump\071915-17612-02.dmp
2015-07-19 17:52 - 2015-07-19 17:52 - 00284392 _____ C:\Windows\Minidump\071915-18564-01.dmp
2015-07-19 17:47 - 2015-07-19 17:47 - 00284392 _____ C:\Windows\Minidump\071915-17378-01.dmp
2015-07-19 17:42 - 2015-07-19 17:42 - 00284392 _____ C:\Windows\Minidump\071915-17596-01.dmp
2015-07-19 17:36 - 2015-07-19 17:36 - 00286488 _____ C:\Windows\Minidump\071915-18423-01.dmp
2015-07-19 14:44 - 2015-07-19 14:45 - 00284392 _____ C:\Windows\Minidump\071915-34913-01.dmp
2015-07-19 14:40 - 2015-07-19 14:40 - 00286488 _____ C:\Windows\Minidump\071915-34086-01.dmp
2015-07-19 14:32 - 2015-07-19 14:32 - 00286448 _____ C:\Windows\Minidump\071915-14648-01.dmp
2015-07-19 14:28 - 2015-07-19 14:28 - 00286856 _____ C:\Windows\Minidump\071915-15693-01.dmp
2015-07-19 14:23 - 2015-07-19 14:23 - 00284392 _____ C:\Windows\Minidump\071915-14383-01.dmp
2015-07-19 14:18 - 2015-07-19 14:18 - 00284392 _____ C:\Windows\Minidump\071915-15303-01.dmp
2015-07-19 13:56 - 2015-07-19 13:43 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-07-19 13:44 - 2015-07-19 14:26 - 00037501 _____ C:\zoek-results.log
2015-07-19 13:43 - 2015-07-19 13:54 - 00000000 ____D C:\zoek_backup
2015-07-19 13:39 - 2015-07-19 13:39 - 01308672 _____ C:\Users\Susan\Desktop\zoek.exe
2015-07-18 20:01 - 2015-07-18 20:01 - 00286696 _____ C:\Windows\Minidump\071815-14539-01.dmp
2015-07-18 19:53 - 2015-07-18 19:53 - 00293352 _____ C:\Windows\Minidump\071815-16723-01.dmp
2015-07-18 13:18 - 2015-07-20 12:10 - 00024689 _____ C:\Users\Susan\Downloads\FRST.txt
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\royal_blood_digital_album
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\Hush Or Howl - MP3
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\7 Cities
2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\12_25133_JohnnyWinter
2015-07-18 13:17 - 2014-02-04 13:45 - 00000000 ____D C:\Users\Susan\Downloads\Lost In The Dream
2015-07-18 13:15 - 2015-07-18 13:15 - 76796180 _____ C:\Users\Susan\Downloads\royal_blood_digital_album.zip
2015-07-18 13:13 - 2015-07-18 13:14 - 171346407 _____ C:\Users\Susan\Downloads\SC310.zip
2015-07-18 13:12 - 2015-07-18 13:13 - 71940031 _____ C:\Users\Susan\Downloads\blackpistolfire_hushorhowl_mp3.zip
2015-07-18 13:11 - 2015-07-18 13:11 - 93077687 _____ C:\Users\Susan\Downloads\7 Cities.zip
2015-07-18 13:08 - 2015-07-18 13:09 - 83367713 _____ C:\Users\Susan\Downloads\12_25133_JohnnyWinter.zip
2015-07-18 08:53 - 2015-07-18 08:53 - 00284392 _____ C:\Windows\Minidump\071815-17300-01.dmp
2015-07-18 08:48 - 2015-07-18 08:48 - 00284392 _____ C:\Windows\Minidump\071815-18018-01.dmp
2015-07-18 08:41 - 2015-07-18 08:41 - 00284392 _____ C:\Windows\Minidump\071815-18033-01.dmp
2015-07-18 08:36 - 2015-07-18 08:36 - 00293336 _____ C:\Windows\Minidump\071815-18657-01.dmp
2015-07-18 03:42 - 2015-07-18 03:42 - 00284392 _____ C:\Windows\Minidump\071815-68328-01.dmp
2015-07-18 03:36 - 2015-07-18 03:36 - 00284392 _____ C:\Windows\Minidump\071815-68500-01.dmp
2015-07-18 03:30 - 2015-07-18 03:30 - 00284392 _____ C:\Windows\Minidump\071815-68968-01.dmp
2015-07-17 18:35 - 2015-07-09 12:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-17 18:35 - 2015-07-09 12:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-17 18:35 - 2015-07-09 12:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-17 18:35 - 2015-07-09 12:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-17 18:35 - 2015-07-09 12:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-17 18:35 - 2015-07-09 12:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-17 18:35 - 2015-06-26 21:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-17 18:35 - 2015-06-26 21:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-17 18:35 - 2015-06-26 20:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-17 18:35 - 2015-06-26 20:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-17 18:35 - 2015-06-25 03:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-17 18:34 - 2015-07-09 12:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-17 18:34 - 2015-07-09 12:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-17 18:34 - 2015-07-09 12:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-17 18:34 - 2015-07-09 12:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-17 18:34 - 2015-07-02 16:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-17 18:34 - 2015-07-02 16:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-17 18:34 - 2015-07-02 15:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-17 18:34 - 2015-07-02 15:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-17 18:34 - 2015-07-02 15:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-17 18:34 - 2015-07-02 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-17 18:34 - 2015-07-02 15:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-17 18:34 - 2015-07-02 15:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-17 18:34 - 2015-07-02 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-17 18:34 - 2015-07-02 14:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-17 18:34 - 2015-07-02 14:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-17 18:34 - 2015-07-02 13:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-17 18:34 - 2015-06-25 13:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-17 18:34 - 2015-06-25 12:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-17 18:34 - 2015-06-20 15:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-17 18:34 - 2015-06-20 14:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-17 18:34 - 2015-06-20 14:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-17 18:34 - 2015-06-20 14:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-17 18:34 - 2015-06-20 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-17 18:34 - 2015-06-20 14:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-17 18:34 - 2015-06-20 14:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-17 18:34 - 2015-06-20 14:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-17 18:34 - 2015-06-20 14:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-17 18:34 - 2015-06-20 14:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-17 18:34 - 2015-06-20 14:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-17 18:34 - 2015-06-20 14:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-17 18:34 - 2015-06-20 14:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-17 18:34 - 2015-06-20 14:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-17 18:34 - 2015-06-20 14:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-17 18:34 - 2015-06-20 14:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-17 18:34 - 2015-06-20 14:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-17 18:34 - 2015-06-20 13:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-17 18:34 - 2015-06-20 13:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-17 18:34 - 2015-06-20 13:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-17 18:34 - 2015-06-20 13:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-17 18:34 - 2015-06-20 13:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-17 18:34 - 2015-06-20 13:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-17 18:34 - 2015-06-19 13:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-17 18:34 - 2015-06-19 13:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-17 18:34 - 2015-06-19 13:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-17 18:34 - 2015-06-19 13:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-17 18:34 - 2015-06-19 13:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-17 18:34 - 2015-06-19 13:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-17 18:34 - 2015-06-19 13:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-17 18:34 - 2015-06-19 13:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-17 18:34 - 2015-06-19 13:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-17 18:34 - 2015-06-19 13:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-17 18:34 - 2015-06-19 12:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-17 18:34 - 2015-06-19 12:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-17 18:34 - 2015-06-19 12:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-17 18:34 - 2015-06-19 12:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-17 18:34 - 2015-06-19 12:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-17 18:34 - 2015-06-19 12:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-17 18:34 - 2015-06-19 12:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-17 18:34 - 2015-06-19 12:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-17 18:34 - 2015-06-19 12:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-17 18:34 - 2015-06-17 12:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-17 18:34 - 2015-06-17 12:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-17 18:34 - 2015-06-01 19:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-17 18:34 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-17 18:34 - 2015-04-27 14:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-17 18:34 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-17 18:34 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-17 18:31 - 2015-07-20 12:09 - 00000000 ____D C:\Users\Susan\Downloads\FRST-OlderVersion
2015-07-17 18:28 - 2015-07-17 18:28 - 00286872 _____ C:\Windows\Minidump\071715-40825-01.dmp
2015-07-17 12:22 - 2015-07-17 12:23 - 00287112 _____ C:\Windows\Minidump\071715-41090-01.dmp
2015-07-17 12:16 - 2015-07-17 12:16 - 00293328 _____ C:\Windows\Minidump\071715-20061-01.dmp
2015-07-17 11:04 - 2015-07-17 11:04 - 00293328 _____ C:\Windows\Minidump\071715-28501-01.dmp
2015-07-16 20:23 - 2015-07-16 20:23 - 00286208 _____ C:\Windows\Minidump\071615-25740-01.dmp
2015-07-16 20:21 - 2015-07-01 15:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-16 20:21 - 2015-07-01 15:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-16 20:21 - 2015-07-01 15:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-16 20:21 - 2015-07-01 15:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-16 20:21 - 2015-07-01 15:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-16 20:21 - 2015-07-01 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-16 20:21 - 2015-07-01 15:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-16 20:21 - 2015-07-01 15:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-16 20:21 - 2015-07-01 15:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-16 20:21 - 2015-07-01 15:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-16 20:21 - 2015-07-01 15:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-16 20:21 - 2015-07-01 15:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-16 20:21 - 2015-07-01 15:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-16 20:21 - 2015-07-01 15:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-16 20:21 - 2015-07-01 15:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-16 20:21 - 2015-07-01 15:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-16 20:21 - 2015-07-01 14:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-16 20:21 - 2015-07-01 14:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-16 20:21 - 2015-07-01 14:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-16 20:20 - 2015-07-04 13:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-16 20:20 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-16 20:20 - 2015-06-15 16:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-16 20:20 - 2015-06-15 16:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-16 20:20 - 2015-06-15 16:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-16 20:20 - 2015-06-15 16:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-16 20:20 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-16 20:20 - 2015-06-15 16:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-16 20:20 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-16 20:20 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-16 20:20 - 2015-06-15 16:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-16 20:20 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-16 20:20 - 2015-06-11 12:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-16 20:20 - 2015-06-11 12:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-07-16 20:20 - 2015-06-11 12:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-07-16 20:19 - 2015-07-03 13:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-16 20:19 - 2015-07-03 13:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-16 20:19 - 2015-07-03 12:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-16 20:19 - 2015-07-03 12:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-16 20:19 - 2015-07-03 11:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-16 20:19 - 2015-07-03 11:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 20:11 - 2015-07-16 20:12 - 00284136 _____ C:\Windows\Minidump\071615-21387-01.dmp
2015-07-16 19:56 - 2015-07-16 19:56 - 00285600 _____ C:\Windows\Minidump\071615-36254-01.dmp
2015-07-16 19:14 - 2015-07-16 19:14 - 00286856 _____ C:\Windows\Minidump\071615-37830-01.dmp
2015-07-16 19:08 - 2015-07-16 19:08 - 00286872 _____ C:\Windows\Minidump\071615-38953-01.dmp
2015-07-16 19:04 - 2015-07-16 19:04 - 00301592 _____ C:\Windows\Minidump\071615-19110-01.dmp
2015-07-16 18:52 - 2015-07-16 18:53 - 00301640 _____ C:\Windows\Minidump\071615-20763-01.dmp
2015-07-15 18:02 - 2015-07-15 18:02 - 00295320 _____ C:\Windows\Minidump\071515-18798-01.dmp
2015-07-15 16:36 - 2015-07-19 18:08 - 557027137 _____ C:\Windows\MEMORY.DMP
2015-07-15 16:36 - 2015-07-19 18:08 - 00000000 ____D C:\Windows\Minidump
2015-07-15 16:36 - 2015-07-15 16:36 - 00293368 _____ C:\Windows\Minidump\071515-25022-01.dmp
2015-07-15 16:35 - 2015-05-08 01:42 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys
2015-07-15 16:34 - 2015-04-27 08:02 - 00198448 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-07-15 16:32 - 2015-07-15 16:32 - 00003064 _____ C:\Windows\System32\Tasks\McAfeeLogon
2015-07-10 19:12 - 2015-07-20 12:08 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-10 19:12 - 2015-07-10 19:12 - 00001108 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-10 19:12 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-10 19:12 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-10 19:12 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-10 19:11 - 2015-07-20 12:09 - 00000000 ____D C:\FRST
2015-07-10 19:10 - 2015-07-20 12:09 - 02135552 _____ (Farbar) C:\Users\Susan\Downloads\FRST64.exe
2015-07-10 19:10 - 2015-07-10 19:11 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Susan\Downloads\mbam-setup-2.1.8.1057.exe
2015-06-25 13:37 - 2015-07-10 18:59 - 00000000 __RSD C:\Users\Brad\Documents\McAfee Vaults
2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\McAfee File Lock
2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\GWX
2015-06-25 13:36 - 2015-06-25 13:36 - 00000000 ____D C:\Users\Brad\AppData\Local\Google
2015-06-25 10:51 - 2015-07-19 14:00 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-06-25 10:51 - 2015-06-25 10:51 - 00004030 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2015-06-25 10:51 - 2015-06-25 10:51 - 00003218 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\Program Files\Dell Support Center
2015-06-24 01:29 - 2015-06-24 01:29 - 01217192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL
2015-06-20 13:03 - 2015-06-20 13:03 - 00013018 _____ C:\Users\Susan\Downloads\tickets_676208.html
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-20 12:10 - 2013-05-17 16:35 - 00000000 __RSD C:\Users\Susan\Documents\McAfee Vaults
2015-07-20 12:09 - 2014-02-19 16:34 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce.job
2015-07-20 12:09 - 2012-09-06 16:13 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-20 12:09 - 2012-04-12 16:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-20 12:08 - 2012-02-11 14:15 - 00081384 _____ C:\ProgramData\dleescan.log
2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2015-07-20 12:08 - 2012-02-08 15:43 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2015-07-20 12:08 - 2012-02-08 15:24 - 01419010 _____ C:\Windows\WindowsUpdate.log
2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-19 18:12 - 2013-11-17 13:31 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-19 18:08 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-19 18:08 - 2009-07-13 23:51 - 00063946 _____ C:\Windows\setupact.log
2015-07-19 17:24 - 2014-10-23 19:00 - 00000000 ____D C:\Windows\system32\appmgmt
2015-07-19 17:24 - 2012-02-11 13:43 - 00000000 ____D C:\Users\Susan
2015-07-19 17:23 - 2013-05-17 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-07-19 14:09 - 2010-11-20 22:47 - 00598520 _____ C:\Windows\PFRO.log
2015-07-18 17:12 - 2013-01-03 17:30 - 00953344 ___SH C:\Users\Susan\Downloads\Thumbs.db
2015-07-18 17:12 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
2015-07-18 14:07 - 2012-03-09 16:24 - 00000000 ____D C:\Users\Susan\Documents\Outlook Files
2015-07-18 04:08 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
2015-07-18 03:23 - 2009-07-13 23:45 - 00416368 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-18 03:21 - 2014-12-14 04:22 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-18 03:21 - 2014-05-06 18:48 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-18 03:21 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-18 03:01 - 2012-03-08 17:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-17 19:29 - 2012-09-06 16:14 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-17 18:42 - 2013-08-14 03:01 - 00000000 ____D C:\Windows\system32\MRT
2015-07-17 18:42 - 2013-04-15 12:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-17 12:19 - 2013-04-15 12:24 - 00000000 ____D C:\Users\Susan\AppData\Local\CrashDumps
2015-07-16 20:22 - 2014-02-19 16:34 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce
2015-07-16 20:22 - 2012-09-06 16:13 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 18:03 - 2009-07-14 00:08 - 00032574 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-15 16:34 - 2012-02-08 16:02 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-07-15 16:27 - 2012-04-12 16:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 16:27 - 2012-04-12 16:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 16:27 - 2012-02-08 15:27 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-14 07:08 - 2015-01-14 17:18 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 19:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PLA
2015-07-10 19:32 - 2005-01-01 16:51 - 00000000 ____D C:\Users\Susan\Desktop\MP3S
2015-07-10 19:02 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-10 19:01 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad
2015-07-10 19:00 - 2014-12-02 14:40 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-07-10 18:59 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-10 18:59 - 2015-03-16 19:31 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-10 18:59 - 2014-12-02 14:36 - 00000000 ____D C:\Users\Susan\Downloads\JDownloader1 Setup
2015-07-10 18:59 - 2014-08-13 10:48 - 00000000 ____D C:\Users\Susan\AppData\Local\JDownloader v2.0
2015-07-10 18:59 - 2014-06-01 16:12 - 00000000 ____D C:\Users\Susan\AppData\Local\Garmin
2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files\McAfee
2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files (x86)\McAfee.com
2015-07-10 18:59 - 2013-04-14 15:54 - 00000000 ____D C:\Users\Susan\AppData\Roaming\uTorrent
2015-07-10 18:59 - 2013-04-12 17:36 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Orbit
2015-07-10 18:59 - 2013-04-12 12:56 - 00000000 ____D C:\Users\Susan\AppData\Local\Applian
2015-07-10 18:59 - 2013-04-12 12:55 - 00000000 ____D C:\Users\Susan\AppData\Local\Jaksta_Technologies_Pty_L
2015-07-10 18:59 - 2012-11-12 16:27 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 18:59 - 2012-09-07 03:01 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Skype
2015-07-10 18:59 - 2012-09-06 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-10 18:59 - 2012-03-08 17:23 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Help
2015-07-10 18:59 - 2012-02-22 20:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-07-10 18:59 - 2012-02-13 12:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\V715w
2015-07-10 18:59 - 2012-02-11 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Nero_AG
2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ___RD C:\Users\Susan\Desktop\MySyncUPFiles
2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macrovision
2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ___RD C:\Users\Susan\Virtual Machines
2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ____D C:\Users\Susan\AppData\Local\VirtualStore
2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\system32\Macromed
2015-07-10 18:59 - 2010-11-21 02:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-07-10 18:58 - 2013-04-13 17:34 - 00000000 ____D C:\Users\Susan\AppData\Local\TechSmith
2015-07-10 18:58 - 2012-03-05 17:54 - 00000000 ____D C:\Users\Susan\Documents\Fax
2015-07-10 18:58 - 2012-02-21 07:50 - 00000000 ____D C:\Users\Susan\AppData\Roaming\SoftGrid Client
2015-07-10 18:58 - 2012-02-13 13:00 - 00000000 ____D C:\Users\Susan\AppData\Roaming\PCDr
2015-07-10 18:58 - 2012-02-11 16:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Intuit
2015-07-10 18:58 - 2012-02-11 14:02 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Adobe
2015-07-10 18:58 - 2012-02-11 13:44 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macromedia
2015-07-10 18:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration
2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\wdfp506
2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\DVDFab
2015-07-10 18:58 - 2007-07-07 12:09 - 00000000 ____D C:\Users\Susan\Documents\New CDs
2015-07-10 18:57 - 2013-04-16 15:10 - 00000000 ____D C:\Users\Susan\AppData\Local\Cyberlink
2015-07-10 18:57 - 2012-09-06 16:13 - 00000000 ____D C:\Users\Susan\AppData\Local\Google
2015-07-10 18:57 - 2012-04-13 16:27 - 00000000 ____D C:\Users\Susan\AppData\Local\Citrix
2015-07-10 18:57 - 2012-02-11 16:30 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Games
2015-07-10 18:57 - 2012-02-11 13:57 - 00000000 ____D C:\Users\Susan\AppData\Local\Dell
2015-07-10 18:49 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad\AppData\Local\SoftThinks
2015-07-03 08:43 - 2012-02-12 20:30 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 14:25 - 2009-07-14 00:13 - 00783424 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-01 14:24 - 2012-03-09 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Windows Live
2015-07-01 14:10 - 2015-02-13 04:03 - 00003820 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2015-07-01 14:09 - 2015-02-13 04:03 - 00000000 ____D C:\ProgramData\SupportAssistAgent
2015-06-25 13:41 - 2013-04-01 16:07 - 00000000 ____D C:\Users\Brad\AppData\Roaming\Apple Computer
2015-06-25 13:37 - 2013-04-01 16:07 - 00111840 _____ C:\Users\Brad\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-25 13:37 - 2013-04-01 16:07 - 00000000 ___RD C:\Users\Brad\Virtual Machines
2015-06-25 13:36 - 2013-04-01 16:07 - 00001379 _____ C:\Users\Brad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-25 10:51 - 2012-02-08 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-06-25 10:50 - 2012-02-13 13:00 - 00000000 ____D C:\ProgramData\PCDr
2015-06-23 13:30 - 2010-11-20 22:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Files in the root of some directories =======
2013-04-13 18:34 - 2013-04-15 19:29 - 0003584 _____ () C:\Users\Susan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2012-02-12 20:04 - 2013-04-12 03:00 - 0014932 _____ () C:\ProgramData\dlee.log
2012-03-04 19:20 - 2014-05-15 13:09 - 0001102 _____ () C:\ProgramData\dleeDiagnostics.log
2012-02-11 14:53 - 2014-05-12 13:06 - 0334944 _____ () C:\ProgramData\dleeJSW.log
2012-02-11 14:15 - 2015-07-20 12:08 - 0081384 _____ () C:\ProgramData\dleescan.log
2012-02-11 15:05 - 2012-02-11 15:05 - 0000252 _____ () C:\ProgramData\FastPics.log
2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2012-02-11 16:25 - 2015-02-22 18:41 - 0001095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-18 04:01
==================== End of log ============================
- Mar 8, 2013
- 22,627
- Mar 8, 2013
- 22,627
From now on, please upload all reports, without exception. Thanks.
Download WhoCrashed from here:
http://www.resplendence.com/download/whocrashedSetup.exe
This program will try to verify the analysis, which is the cause of driver error.
Note: This program requires installation.
Double-click to start the installation, and click Next .
Please attach here notepad with that logreport.
Download WhoCrashed from here:
http://www.resplendence.com/download/whocrashedSetup.exe
This program will try to verify the analysis, which is the cause of driver error.
Note: This program requires installation.
Double-click to start the installation, and click Next .
- Check I accept the agreement and then the Next .
The program install to that location, and under that name by the program you offer. - Click Next and in the next window, click Next
- Check Create a Desktop Icon and then click Next and then Install .
After you've installed WhoCrashed program, run it.
Note: If you get message that it look like this:
Click Download the requested file from the Microsoft site now and wait for the process to
download additional files and installation is complete.
>> When the program starts, click Analyze .
When scanning is done,click OK .
- Right-click on the area of the page with the report and select Select All, .
- Right-click on the area of the page with the report and select copy
- Open a new Notepad and select past to copy the contents of the logo in the notepad.
Please attach here notepad with that logreport.
- Mar 8, 2013
- 22,627
Good. We probably found the cause of this. It seems that McAfee product is doing this for some reason, so we will need to reinstall it.
Please uninstall following products:
Then download and run McAfee Consumer Product removal tool to get rid of all remnants:
http://www.bleepingcomputer.com/download/mcafee-consumer-products-removal-tool/
Please uninstall following products:
- McAfee Security Scan Plus
- McAfee Total Protection
- McAfee WebAdvisor
Then download and run McAfee Consumer Product removal tool to get rid of all remnants:
http://www.bleepingcomputer.com/download/mcafee-consumer-products-removal-tool/
