First I'd like to say I started this topic, but added the wrong logs. I couldn't delete it, so I started a new one.
Yesterday, my desktop computer started acting up. Each time I open IE I get the Internet Explorer Security pop up saying Google toolbar is trying to access the computer. I know google toolbar is a legit program, but it pops up every single time which is not normal. Also, each time I changed my defult search engine it redirects it to a program called Vosteran, which accidently got downloaded from another site. I think Vosteran might be the culprit, but I really don't know. Here are the logs that you requested. I hope you can help. Thanks
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-01-05 20:39:52
—————————–
20:39:52.052 OS Version: Windows x64 6.2.9200
20:39:52.052 Number of processors: 4 586 0x2502
20:39:52.052 ComputerName: HOME UserName:
20:39:53.537 Initialize success
20:39:53.584 VM: initialized successfully
20:39:53.599 VM: Intel CPU supported
20:39:59.625 VM: disk I/O storahci.sys
20:41:51.041 AVAST engine defs: 15010501
20:42:07.418 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000028
20:42:07.418 Disk 0 Vendor: WDC_WD10EZEX-60ZF5A0 80.00A80 Size: 953869MB BusType: 11
20:42:07.496 Disk 0 MBR read successfully
20:42:07.496 Disk 0 MBR scan
20:42:07.589 Disk 0 Windows 7 default MBR code
20:42:07.605 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 350 MB offset 2048
20:42:07.636 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953517 MB offset 718848
20:42:07.683 Disk 0 scanning C:\Windows\system32\drivers
20:42:18.075 Service scanning
20:42:20.216 Service BdfNdisf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys **LOCKED** 5
20:42:20.247 Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
20:42:20.310 Service bdfwfpf_pc C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys **LOCKED** 5
20:42:38.954 Modules scanning
20:42:38.954 Disk 0 trace - called modules:
20:42:38.985 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys storahci.sys hal.dll
20:42:38.985 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001ab3894a0]
20:42:39.001 3 CLASSPNP.SYS[fffff8009e802170] -> nt!IofCallDriver -> \Device\00000028[0xffffe001ab0ab060]
20:42:40.845 AVAST engine scan C:\Windows
20:42:43.377 AVAST engine scan C:\Windows\system32
20:45:48.118 AVAST engine scan C:\Windows\system32\drivers
20:46:01.574 AVAST engine scan C:\Users\Nicole
20:57:36.583 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
20:57:36.708 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-01-05 20:39:52
—————————–
20:39:52.052 OS Version: Windows x64 6.2.9200
20:39:52.052 Number of processors: 4 586 0x2502
20:39:52.052 ComputerName: HOME UserName:
20:39:53.537 Initialize success
20:39:53.584 VM: initialized successfully
20:39:53.599 VM: Intel CPU supported
20:39:59.625 VM: disk I/O storahci.sys
20:41:51.041 AVAST engine defs: 15010501
20:42:07.418 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000028
20:42:07.418 Disk 0 Vendor: WDC_WD10EZEX-60ZF5A0 80.00A80 Size: 953869MB BusType: 11
20:42:07.496 Disk 0 MBR read successfully
20:42:07.496 Disk 0 MBR scan
20:42:07.589 Disk 0 Windows 7 default MBR code
20:42:07.605 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 350 MB offset 2048
20:42:07.636 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953517 MB offset 718848
20:42:07.683 Disk 0 scanning C:\Windows\system32\drivers
20:42:18.075 Service scanning
20:42:20.216 Service BdfNdisf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys **LOCKED** 5
20:42:20.247 Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
20:42:20.310 Service bdfwfpf_pc C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys **LOCKED** 5
20:42:38.954 Modules scanning
20:42:38.954 Disk 0 trace - called modules:
20:42:38.985 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys storahci.sys hal.dll
20:42:38.985 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001ab3894a0]
20:42:39.001 3 CLASSPNP.SYS[fffff8009e802170] -> nt!IofCallDriver -> \Device\00000028[0xffffe001ab0ab060]
20:42:40.845 AVAST engine scan C:\Windows
20:42:43.377 AVAST engine scan C:\Windows\system32
20:45:48.118 AVAST engine scan C:\Windows\system32\drivers
20:46:01.574 AVAST engine scan C:\Users\Nicole
20:57:36.583 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
20:57:36.708 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
20:57:50.851 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
20:57:50.929 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-01-05 20:39:52
—————————–
20:39:52.052 OS Version: Windows x64 6.2.9200
20:39:52.052 Number of processors: 4 586 0x2502
20:39:52.052 ComputerName: HOME UserName:
20:39:53.537 Initialize success
20:39:53.584 VM: initialized successfully
20:39:53.599 VM: Intel CPU supported
20:39:59.625 VM: disk I/O storahci.sys
20:41:51.041 AVAST engine defs: 15010501
20:42:07.418 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000028
20:42:07.418 Disk 0 Vendor: WDC_WD10EZEX-60ZF5A0 80.00A80 Size: 953869MB BusType: 11
20:42:07.496 Disk 0 MBR read successfully
20:42:07.496 Disk 0 MBR scan
20:42:07.589 Disk 0 Windows 7 default MBR code
20:42:07.605 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 350 MB offset 2048
20:42:07.636 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953517 MB offset 718848
20:42:07.683 Disk 0 scanning C:\Windows\system32\drivers
20:42:18.075 Service scanning
20:42:20.216 Service BdfNdisf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys **LOCKED** 5
20:42:20.247 Service bdfwfpf C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys **LOCKED** 5
20:42:20.310 Service bdfwfpf_pc C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys **LOCKED** 5
20:42:38.954 Modules scanning
20:42:38.954 Disk 0 trace - called modules:
20:42:38.985 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys storahci.sys hal.dll
20:42:38.985 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001ab3894a0]
20:42:39.001 3 CLASSPNP.SYS[fffff8009e802170] -> nt!IofCallDriver -> \Device\00000028[0xffffe001ab0ab060]
20:42:40.845 AVAST engine scan C:\Windows
20:42:43.377 AVAST engine scan C:\Windows\system32
20:45:48.118 AVAST engine scan C:\Windows\system32\drivers
20:46:01.574 AVAST engine scan C:\Users\Nicole
20:57:36.583 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
20:57:36.708 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
20:57:50.851 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
20:57:50.929 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
21:00:14.841 File: C:\Users\Nicole\AppData\Local\Microsoft\Windows\INetCache\IE\WRJV9LX1\java_setup.exe **INFECTED** Win32:Rootkit-gen [Rtk]
21:56:29.398 AVAST engine scan C:\ProgramData
21:58:26.380 Disk 0 statistics 6720953/0/0 @ 0.90 MB/s
21:58:26.395 Scan finished successfully
21:59:19.420 Disk 0 MBR has been saved successfully to "C:\Users\Nicole\Desktop\MBR.dat"
21:59:19.499 The log file has been saved successfully to "C:\Users\Nicole\Desktop\aswMBR.txt"
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2015
Ran by [removed] (administrator) on HOME on 05-01-2015 22:06:14
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39barsvc.exe
(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
( ) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\AppIntegrator64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(NETGEAR Inc.) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
() C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39brmon.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39brmon64.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Macrovision Europe Ltd.) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\…\Run: [MapsGalaxy Home Page Guard 64 bit] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\AppIntegrator64.exe [485960 2014-08-15] ( )
HKLM\…\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1686480 2014-12-17] (Bitdefender)
HKLM-x32\…\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [MapsGalaxy Search Scope Monitor] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrchMn.exe [55368 2014-08-15] (Mindspark)
HKLM-x32\…\Run: [MapsGalaxy_39 Browser Plugin Loader] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39brmon.exe [61512 2014-08-15] (VER_COMPANY_NAME)
HKLM-x32\…\Run: [MapsGalaxy_39 Browser Plugin Loader 64] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39brmon64.exe [71752 2014-08-15] (VER_COMPANY_NAME)
HKLM-x32\…\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [620152 2006-10-22] (Adobe Systems Inc.)
HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\…\Run: [] => [X]
HKLM-x32\…\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\…\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-11-04] (Apple Inc.)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\…\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [407904 2014-11-27] (Citrix Systems, Inc.)
HKLM-x32\…\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153952 2014-11-27] (Citrix Systems, Inc.)
HKLM-x32\…\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC.)
HKLM-x32\…\Run: [PowerPDF Registry Controller] => C:\Program Files (x86)\Nuance\Power PDF\RegistryController.exe [193560 2014-07-07] (Nuance Communications, Inc.)
HKLM-x32\…\Run: [Nuance Power PDF Advanced-reminder] => C:\Program Files (x86)\Nuance\Power PDF\Ereg\Ereg.exe [330056 2014-02-25] (Nuance Communications, Inc.)
HKLM-x32\…\Run: [PowerPDFInboxMonitor] => C:\Program Files (x86)\Nuance\Power PDF\InboxMonitor.exe [110920 2014-03-14] (Nuance Communications, Inc.)
HKLM-x32\…\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313656 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\…\Run: [NuanPowerPdf1NPDFLM] => C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exe [2971672 2014-07-07] (Nuance Communications, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [NETGEARGenie] => C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2013-11-14] (NETGEAR Inc.)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [Google Update] => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-20] (Google Inc.)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-08-25] (Google Inc.)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [GoogleChromeAutoLaunch_18F9ED406E377D72992EE1809DE354B5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-05] (Google Inc.)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2014-12-17] (Bitdefender)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\MountPoints2: {41db3bb8-2be2-11e4-8284-20cf30cb72cf} - "I:\VZW_Software_upgrade_assistant.exe"
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\MountPoints2: {d98e2692-7665-11e3-824b-806e6f6e6963} - "H:\Autorun.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
ShortcutTarget: Adobe Acrobat Speed Launcher.lnk -> C:\Windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
ShortcutTarget: Adobe Acrobat Synchronizer.lnk -> C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
Startup: C:\Users\Mia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-936412100-4191080330-638901748-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/
URLSearchHook: HKU\S-1-5-21-936412100-4191080330-638901748-1001 - (No Name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark)
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://Vosteran.com/results.php?f=4&q;={searchTerms}&a;=vst_ggfc_15_01_ie&cd;=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0C0ByBtB0C0F0DzyyCtDtN0D0Tzu0StCtDzyzytN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtA0BtCzz0C0AyBtG0CtDyBtAtG0EyE0DyEtGtDyD0CyEtGyDyEyDyCtBzytA0CzytC0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0CtCyDtDtCtDyCtGzy0A0DtDtGyEtB0BtDtG0BtBtAzytGyCtB0FyDyB0A0D0AzytByD0C2Q&cr;=1327159923&ir;=
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://Vosteran.com/results.php?f=4&q;={searchTerms}&a;=vst_ggfc_15_01_ie&cd;=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0C0ByBtB0C0F0DzyyCtDtN0D0Tzu0StCtDzyzytN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtA0BtCzz0C0AyBtG0CtDyBtAtG0EyE0DyEtGtDyD0CyEtGyDyEyDyCtBzytA0CzytC0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0CtCyDtDtCtDyCtGzy0A0DtDtGyEtB0BtDtG0BtBtAzytGyCtB0FyDyB0A0D0AzytByD0C2Q&cr;=1327159923&ir;=
SearchScopes: HKLM-x32 -> {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = http://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm423^S10523^us&si;=49588_SEARCHMAPS-MAIN-STREET&ptb;=88DEC5D0-9FFA-4612-AA3E-5F46A0C20C71&ind;=2014082910&n;=780c775e&psa;=&st;=sb&searchfor;={searchTerms}
SearchScopes: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> URL http://search.conduit.com/Results.aspx?ctid=CT3314759&octid;=EB_ORIGINAL_CTID&SearchSource;=58&CUI;=&UM;=4&UP;=SP37AD5991-3F10-4FCC-BE25-5C4340AA9C6A&q;={searchTerms}&SSPV;=
SearchScopes: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: No Name -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Toolbar BHO -> {1e91a655-bb4b-4693-a05e-2edebc4c9d89} -> C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Search Assistant BHO -> {71c1d63a-c944-428a-a5bd-ba513190e5d2} -> C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Nuance PDF Toolbar Helper -> {940361F8-7F16-4498-AB43-2EFFE0235AFA} -> C:\Program Files (x86)\Nuance\Power PDF\Bin\SZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: PlusIEEventHelper Class -> {9D137966-2E29-45C5-9B12-29D5427F8F66} -> C:\Program Files (x86)\Nuance\Power PDF\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll (Bitdefender)
Toolbar: HKLM-x32 - Nuance PDF - {BED78D9C-A025-4FE9-B3BA-27E6D376A3D5} - C:\Program Files (x86)\Nuance\Power PDF\Bin\SZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
Toolbar: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Toolbar: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
Toolbar: HKU\S-1-5-21-936412100-4191080330-638901748-1001 -> MapsGalaxy - {364EA597-E728-4CE4-BB4A-ED846EF47970} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://qtinstall.apple.com/qtactivex/qtplugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {55A2C0CD-3DE8-4264-9637-A0B40B05714E} https://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=1547480989
DPF: HKLM-x32 {A5A5E1FF-FFEF-3FEF-B592-C6D194F4383F} https://vpn1.judiciary.state.nj.us/CACHE/sdesktop/install/binaries/instweb.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Winsock: Catalog5 07 C:\Windows\SysWOW64\wlidNSP.dll [50176] (Microsoft Corporation)
Winsock: Catalog5 08 C:\Windows\SysWOW64\wlidNSP.dll [50176] (Microsoft Corporation)
Winsock: Catalog5-x64 07 C:\Windows\system32\wlidnsp.dll [74240] (Microsoft Corporation)
Winsock: Catalog5-x64 08 C:\Windows\system32\wlidnsp.dll [74240] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\peaerzl8.default
FF SelectedSearchEngine: Vosteran
FF Homepage: hxxp://Vosteran.com/?f=1&a;=vst_ggfc_15_01_ie&cd;=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0C0ByBtB0C0F0DzyyCtDtN0D0Tzu0StCtDzyzytN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtA0BtCzz0C0AyBtG0CtDyBtAtG0EyE0DyEtGtDyD0CyEtGyDyEyDyCtBzytA0CzytC0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0CtCyDtDtCtDyCtGzy0A0DtDtGyEtB0BtDtG0BtBtAzytGyCtB0FyDyB0A0D0AzytByD0C2Q&cr;=1327159923&ir;=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll (Citrix Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @MapsGalaxy_39.com/Plugin -> C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (Mindspark)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\Power PDF\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKU\S-1-5-21-936412100-4191080330-638901748-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Nicole\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-936412100-4191080330-638901748-1001: @talk.google.com/O1DPlugin -> C:\Users\Nicole\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-936412100-4191080330-638901748-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-936412100-4191080330-638901748-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\peaerzl8.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\Nicole\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Nicole\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\peaerzl8.default\searchplugins\Vosteran.xml
FF Extension: Add Google Search To New Tab Page - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\peaerzl8.default\Extensions\[removed] [2014-12-11]
FF HKLM\…\Thunderbird\Extensions: [[removed]] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-11-03]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-11-03]
FF HKLM-x32\…\Thunderbird\Extensions: [[removed]] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Nuance PDF Convert - C:\Program Files (x86)\Nuance\Power PDF\FireFox [2015-01-01]
Chrome:
=======
CHR HomePage: Default -> hxxp://Vosteran.com/?f=1&a;=vst_ggfc_15_01_ie&cd;=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0C0ByBtB0C0F0DzyyCtDtN0D0Tzu0StCtDzyzytN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtA0BtCzz0C0AyBtG0CtDyBtAtG0EyE0DyEtGtDyD0CyEtGyDyEyDyCtBzytA0CzytC0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0CtCyDtDtCtDyCtGzy0A0DtDtGyEtB0BtDtG0BtBtAzytGyCtB0FyDyB0A0D0AzytByD0C2Q&cr;=1327159923&ir;=
CHR StartupUrls: Default -> "hxxp://Vosteran.com/?f=7&a;=vst_ggfc_15_01_ie&cd;=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0C0ByBtB0C0F0DzyyCtDtN0D0Tzu0StCtDzyzytN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtA0BtCzz0C0AyBtG0CtDyBtAtG0EyE0DyEtGtDyD0CyEtGyDyEyDyCtBzytA0CzytC0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0CtCyDtDtCtDyCtGzy0A0DtDtGyEtB0BtDtG0BtBtAzytGyCtB0FyDyB0A0D0AzytByD0C2Q&cr;=1327159923&ir;=","hxxp://www.google.com/"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li;=ff&q;={searchTerms}
CHR Profile: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-25]
CHR Extension: (Google Drive) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-25]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-25]
CHR Extension: (YouTube) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-25]
CHR Extension: (Google Search) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-25]
CHR Extension: (Bitdefender Wallet) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2014-11-04]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-12-31]
CHR Extension: (Into The Mist) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2014-12-03]
CHR Extension: (Google Wallet) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-25]
CHR Extension: (Gmail) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-25]
CHR HKLM\…\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - No Path
CHR HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
CHR HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - No Path
CHR HKLM-x32\…\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - No Path
CHR HKLM-x32\…\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-17] (Bitdefender)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-28] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-09-09] (Macrovision Europe Ltd.) [File not signed]
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2013-08-22] (HP) [File not signed]
R2 MapsGalaxy_39Service; C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39barsvc.exe [88648 2014-08-15] (COMPANYVERS_NAME)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [File not signed]
R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [232192 2013-11-14] (NETGEAR)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [File not signed]
S4 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [20480 2009-09-16] (Intuit) [File not signed]
S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2006-11-09] (Intuit Inc.) [File not signed]
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-11-12] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1545376 2014-12-17] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1288472 2014-11-12] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [263032 2014-11-12] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-05-16] (BitDefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 BdfNdisf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys [98768 2013-11-19] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2014-12-17] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)
R3 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [155912 2014-12-17] (BitDefender LLC)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2014-04-12] (CACE Technologies, Inc.)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2015-01-04] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-11-12] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
U3 aswMBR; \??\C:\Users\Nicole\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\Nicole\AppData\Local\Temp\aswVmm.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-05 22:06 - 2015-01-05 22:06 - 00035198 _____ () C:\Users\Nicole\Desktop\FRST.txt
2015-01-05 22:05 - 2015-01-05 22:06 - 00000000 ____D () C:\FRST
2015-01-05 22:03 - 2015-01-05 22:03 - 02123776 _____ (Farbar) C:\Users\Nicole\Downloads\FRST64.exe
2015-01-05 22:03 - 2015-01-05 22:03 - 02123776 _____ (Farbar) C:\Users\Nicole\Desktop\FRST64.exe
2015-01-05 20:57 - 2015-01-05 21:59 - 00007469 _____ () C:\Users\Nicole\Desktop\aswMBR.txt
2015-01-05 20:57 - 2015-01-05 21:59 - 00000512 _____ () C:\Users\Nicole\Desktop\MBR.dat
2015-01-05 20:39 - 2015-01-05 20:38 - 05198336 _____ (AVAST Software) C:\Users\Nicole\Desktop\aswMBR.exe
2015-01-05 20:38 - 2015-01-05 20:38 - 05198336 _____ (AVAST Software) C:\Users\Nicole\Downloads\aswMBR.exe
2015-01-05 20:19 - 2015-01-05 20:23 - 00018724 _____ () C:\Users\Nicole\Desktop\hijackthis.log
2015-01-05 20:18 - 2015-01-05 20:18 - 00388608 _____ (Trend Micro Inc.) C:\Users\Nicole\Desktop\HijackThis.exe
2015-01-05 18:38 - 2015-01-05 18:38 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Nuance
2015-01-05 09:48 - 2015-01-05 09:48 - 00000000 ____D () C:\Users\Ryan\AppData\Roaming\Nuance
2015-01-04 22:39 - 2015-01-04 22:39 - 00003240 _____ () C:\Windows\System32\Tasks\{24515BF0-9C1B-45C3-9E27-163C1B0E83C1}
2015-01-04 22:24 - 2015-01-04 22:24 - 00003338 _____ () C:\Windows\System32\Tasks\{852464B3-9C55-423E-9D71-6C559981111E}
2015-01-04 22:02 - 2015-01-04 22:02 - 00000000 ____D () C:\ProgramData\Unchecky
2015-01-04 22:00 - 2015-01-05 20:14 - 00000430 _____ () C:\Windows\Tasks\DriverUpdate Startup.job
2015-01-04 22:00 - 2015-01-04 22:34 - 00000484 _____ () C:\Windows\Tasks\DriverUpdate Scan.job
2015-01-04 22:00 - 2015-01-04 22:08 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2015-01-04 22:00 - 2015-01-04 22:00 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-01-04 22:00 - 2015-01-04 22:00 - 00003336 _____ () C:\Windows\System32\Tasks\DriverUpdate Scan
2015-01-04 22:00 - 2015-01-04 22:00 - 00002838 _____ () C:\Windows\System32\Tasks\DriverUpdate Startup
2015-01-04 22:00 - 2015-01-04 22:00 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2015-01-04 21:58 - 2015-01-04 21:59 - 00799120 _____ ( ) C:\Users\Nicole\Downloads\FileOpenerSetup.exe
2015-01-04 21:49 - 2015-01-04 21:50 - 13034045 _____ () C:\Users\Nicole\Downloads\Footpaths.themepack
2015-01-03 15:57 - 2015-01-03 15:57 - 00000000 _____ () C:\Users\Nicole\Documents\HPLJM476_Fax_Port
2015-01-02 18:32 - 2015-01-02 18:32 - 00000000 ____D () C:\Users\Cole\AppData\Roaming\FLEXnet
2015-01-02 12:12 - 2015-01-02 12:12 - 00000000 ____D () C:\Users\Angela\AppData\Roaming\FLEXnet
2015-01-01 17:09 - 2015-01-01 17:09 - 00320286 ____T () C:\Users\Nicole\Desktop\11.oxps
2015-01-01 10:22 - 2015-01-01 10:22 - 20257008 _____ () C:\Users\Nicole\Downloads\upd-ps-x64-6.0.0.18849.exe
2015-01-01 10:18 - 2015-01-01 10:18 - 18704928 _____ () C:\Users\Nicole\Downloads\M476_Color_MFP_Series_FW_Update-20140826(1).exe
2015-01-01 10:15 - 2015-01-01 10:15 - 00003474 _____ () C:\Windows\System32\Tasks\HPLJCustParticipation
2015-01-01 10:15 - 2015-01-01 10:15 - 00001297 _____ () C:\Users\Public\Desktop\HP Color LaserJet Pro MFP M476 – Help & Learn Center.lnk
2015-01-01 10:14 - 2015-01-01 10:14 - 00001272 _____ () C:\Users\Public\Desktop\HP LJ M476 Scan.lnk
2015-01-01 10:14 - 2015-01-01 10:14 - 00000000 ____D () C:\Users\Public\Desktop\HP
2015-01-01 10:14 - 2015-01-01 10:14 - 00000000 ____D () C:\Users\Nicole\Desktop\HP
2015-01-01 10:14 - 2015-01-01 10:14 - 00000000 ____D () C:\Program Files\HP
2015-01-01 10:10 - 2015-01-01 10:10 - 125069576 _____ () C:\Users\Nicole\Downloads\LJPro-MFP-M476-Full-Solution-13302(1).exe
2015-01-01 10:09 - 2014-11-17 15:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-01-01 10:09 - 2014-11-17 15:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-01-01 10:09 - 2014-11-15 14:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-01-01 10:09 - 2014-11-15 01:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-01-01 10:09 - 2014-11-14 09:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-01 10:09 - 2014-11-14 02:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-01 10:09 - 2014-11-14 01:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2015-01-01 10:09 - 2014-11-14 01:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-01 10:09 - 2014-11-14 01:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-01-01 10:09 - 2014-11-14 01:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-01 10:09 - 2014-11-14 01:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2015-01-01 10:09 - 2014-11-14 01:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-01-01 10:09 - 2014-11-14 01:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-01 10:09 - 2014-11-14 01:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-01 10:09 - 2014-11-14 01:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-01 10:09 - 2014-11-14 01:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-01-01 10:09 - 2014-11-14 01:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-01-01 10:09 - 2014-11-14 01:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-01-01 10:09 - 2014-11-14 00:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-01 10:09 - 2014-11-14 00:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-01-01 10:09 - 2014-11-14 00:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-01 10:09 - 2014-11-14 00:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-01 10:09 - 2014-11-14 00:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-01 10:09 - 2014-11-13 23:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-01-01 10:09 - 2014-11-10 19:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-01-01 10:09 - 2014-11-10 19:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-01 10:09 - 2014-11-10 13:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-01 10:09 - 2014-11-10 13:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-01 10:09 - 2014-11-10 13:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-01 10:09 - 2014-11-10 13:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2015-01-01 10:09 - 2014-11-09 21:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2015-01-01 10:09 - 2014-11-09 20:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2015-01-01 10:09 - 2014-11-09 20:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-01-01 10:09 - 2014-11-09 20:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-01-01 10:09 - 2014-11-09 20:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2015-01-01 10:09 - 2014-11-09 20:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-01-01 10:09 - 2014-11-09 20:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2015-01-01 10:09 - 2014-11-09 20:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-01-01 10:09 - 2014-11-09 19:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-01-01 10:09 - 2014-11-09 19:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-01-01 10:09 - 2014-11-08 05:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-01-01 10:09 - 2014-11-08 05:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-01-01 10:09 - 2014-11-07 23:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-01-01 10:09 - 2014-11-07 23:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2015-01-01 10:09 - 2014-11-07 22:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2015-01-01 10:09 - 2014-11-07 22:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-01-01 10:09 - 2014-11-07 22:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2015-01-01 10:09 - 2014-11-07 22:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2015-01-01 10:09 - 2014-11-07 22:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2015-01-01 10:09 - 2014-11-07 22:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2015-01-01 10:09 - 2014-11-07 22:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-01-01 10:09 - 2014-11-07 22:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2015-01-01 10:09 - 2014-11-07 22:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-01-01 10:09 - 2014-11-07 21:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-01-01 10:09 - 2014-11-07 21:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-01-01 10:09 - 2014-11-07 21:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-01-01 10:09 - 2014-11-07 21:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-01-01 10:09 - 2014-11-07 21:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-01-01 10:09 - 2014-11-07 20:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-01-01 10:09 - 2014-11-07 20:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-01-01 10:09 - 2014-11-07 20:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-01-01 10:09 - 2014-11-06 22:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-01-01 10:09 - 2014-11-06 22:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-01-01 10:09 - 2014-11-04 21:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2015-01-01 10:09 - 2014-11-04 21:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2015-01-01 10:09 - 2014-11-04 21:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2015-01-01 10:09 - 2014-11-04 20:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-01-01 10:09 - 2014-11-04 20:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2015-01-01 10:09 - 2014-11-04 20:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-01-01 10:09 - 2014-11-04 20:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-01-01 10:09 - 2014-11-04 20:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-01-01 10:09 - 2014-11-04 20:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2015-01-01 10:09 - 2014-11-04 20:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2015-01-01 10:09 - 2014-11-04 20:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-01-01 10:09 - 2014-11-04 20:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-01-01 10:09 - 2014-11-04 20:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-01-01 10:09 - 2014-11-04 20:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-01-01 10:09 - 2014-11-04 14:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-01-01 10:09 - 2014-11-04 14:25 - 00059712 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-01-01 10:09 - 2014-11-04 14:25 - 00051008 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-01-01 10:09 - 2014-11-04 01:55 - 00026112 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-01-01 10:09 - 2014-11-04 01:54 - 00108544 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-01-01 10:09 - 2014-11-04 01:54 - 00032256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-01-01 10:09 - 2014-11-04 01:54 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-01-01 10:09 - 2014-11-04 01:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-01-01 10:09 - 2014-11-04 00:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-01-01 10:09 - 2014-10-30 19:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-01-01 10:09 - 2014-10-30 19:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-01-01 10:09 - 2014-10-30 00:55 - 07473472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-01 10:09 - 2014-10-30 00:47 - 01499384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-01-01 10:09 - 2014-10-30 00:41 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-01-01 10:09 - 2014-10-28 22:05 - 00551232 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2015-01-01 10:09 - 2014-10-28 21:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-01-01 10:09 - 2014-10-28 21:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-01-01 10:09 - 2014-10-28 20:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-01-01 10:09 - 2014-10-28 20:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2015-01-01 10:09 - 2014-10-28 20:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-01 10:09 - 2014-10-28 20:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-01 10:09 - 2014-10-28 20:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-01 10:09 - 2014-10-28 20:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-01-01 10:09 - 2014-10-28 20:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-01 10:09 - 2014-10-28 20:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-01 10:09 - 2014-10-26 17:10 - 00390841 _____ () C:\Windows\system32\ApnDatabase.xml
2015-01-01 10:09 - 2014-10-20 20:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2015-01-01 10:09 - 2014-10-20 20:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2015-01-01 10:09 - 2014-10-20 19:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2015-01-01 10:09 - 2014-10-20 19:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2015-01-01 10:09 - 2014-10-20 19:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-01-01 10:09 - 2014-10-20 19:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2015-01-01 10:09 - 2014-10-20 19:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-01-01 10:09 - 2014-10-16 23:56 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-01-01 10:09 - 2014-10-16 23:56 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-01-01 10:09 - 2014-10-16 23:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-01-01 10:09 - 2014-10-16 22:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-01-01 08:36 - 2015-01-01 08:36 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\FLEXnet
2015-01-01 02:44 - 2015-01-01 02:44 - 00000000 ____D () C:\Users\Ryan\AppData\Roaming\FLEXnet
2015-01-01 02:05 - 2015-01-05 22:06 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-01 02:05 - 2015-01-01 02:05 - 00001886 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2015-01-01 02:05 - 2015-01-01 02:05 - 00000000 ____D () C:\Windows\PIXTRAN
2015-01-01 02:05 - 2015-01-01 02:05 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\Nuance
2015-01-01 02:05 - 2015-01-01 02:05 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Nuance
2015-01-01 02:05 - 2015-01-01 02:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance Power PDF Advanced
2015-01-01 02:04 - 2015-01-01 02:05 - 00000000 ____D () C:\ProgramData\Nuance
2015-01-01 02:04 - 2015-01-01 02:04 - 00000000 ____D () C:\ProgramData\Macrovision
2015-01-01 02:04 - 2015-01-01 02:04 - 00000000 ____D () C:\Program Files (x86)\Nuance
2015-01-01 02:02 - 2015-01-01 02:03 - 00000000 ____D () C:\ppa-nv-e-14164_400
2014-12-31 23:57 - 2015-01-01 00:45 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\PrimoPDF
2014-12-31 23:37 - 2015-01-01 01:51 - 00000000 ____D () C:\Program Files (x86)\Nitro PDF
2014-12-31 23:37 - 2011-02-28 17:37 - 00095008 _____ () C:\Windows\system32\Primomonnt.dll
2014-12-31 23:36 - 2014-12-31 23:36 - 07549704 _____ () C:\Users\Nicole\Downloads\InternationalPrimoPDF.exe
2014-12-31 00:23 - 2014-12-31 00:23 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-31 00:23 - 2014-12-31 00:23 - 00002039 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-12-31 00:01 - 2014-12-31 00:01 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Apps\2.0
2014-12-30 12:39 - 2014-12-30 12:39 - 00000000 ____D () C:\Users\Ryan\AppData\Roaming\Free Screencapture
2014-12-30 12:39 - 2014-12-30 12:39 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Spoon
2014-12-30 12:38 - 2014-12-30 12:38 - 00000000 _____ () C:\Users\Ryan\Documents\HPLJM476_Fax_Port
2014-12-30 10:44 - 2014-12-30 10:44 - 00000000 ____D () C:\Users\Ryan\Documents\Version Cue
2014-12-30 10:44 - 2014-12-30 10:44 - 00000000 ____D () C:\Users\Ryan\Documents\AdobeStockPhotos
2014-12-29 15:19 - 2014-12-29 15:19 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Sonos,_Inc
2014-12-29 13:12 - 2014-12-29 13:12 - 00000792 _____ () C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\192.168.1.10 - Sonos PLAY1.lnk
2014-12-27 21:33 - 2015-01-05 20:15 - 00000000 ___RD () C:\Users\Nicole\Google Drive
2014-12-27 21:33 - 2014-12-27 21:33 - 00001726 _____ () C:\Users\Nicole\Desktop\Google Drive.lnk
2014-12-27 13:06 - 2014-12-27 13:06 - 18704928 _____ () C:\Users\Nicole\Downloads\M476_Color_MFP_Series_FW_Update-20140826.exe
2014-12-27 13:03 - 2014-12-27 13:03 - 19282160 _____ () C:\Users\Nicole\Downloads\upd-pcl6-x64-6.0.0.18849.exe
2014-12-27 12:58 - 2014-12-27 12:59 - 125069576 _____ () C:\Users\Nicole\Downloads\LJPro-MFP-M476-Full-Solution-13302.exe
2014-12-26 23:32 - 2014-12-26 23:32 - 00000000 ____D () C:\Users\Public\Documents\Hewlett-Packard
2014-12-23 22:29 - 2014-12-23 22:29 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Apple Computer
2014-12-21 20:02 - 2014-12-21 20:02 - 00000000 __SHD () C:\Users\Cole\AppData\Local\EmieBrowserModeList
2014-12-21 20:02 - 2014-12-21 20:02 - 00000000 ____D () C:\Users\Cole\AppData\Roaming\Hewlett-Packard Company
2014-12-21 20:02 - 2014-12-21 20:02 - 00000000 ____D () C:\Users\Cole\AppData\Roaming\Apple Computer
2014-12-20 20:16 - 2014-12-20 20:16 - 00001965 _____ () C:\Users\Public\Desktop\Sonos.lnk
2014-12-17 11:12 - 2014-12-17 11:12 - 00155912 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2014-12-17 11:12 - 2014-12-17 11:12 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2014-12-17 11:12 - 2014-12-17 11:12 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2014-12-12 00:01 - 2013-09-04 08:57 - 00593184 _____ (HP) C:\Windows\SysWOW64\hpcdmc32.DLL
2014-12-12 00:01 - 2013-09-04 08:54 - 00444192 _____ (Hewlett-Packard Corporation) C:\Windows\system32\hpcpn155.dll
2014-12-12 00:01 - 2013-09-04 08:50 - 00442656 _____ (Hewlett Packard Corporation) C:\Windows\SysWOW64\hpcc3155.DLL
2014-12-11 15:41 - 2015-01-05 15:41 - 00004954 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for HOME-Ryan home
2014-12-10 19:01 - 2014-12-10 19:08 - 00000000 ____D () C:\Users\Angela\AppData\Roaming\Google
2014-12-10 11:54 - 2014-10-30 17:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-10 11:54 - 2014-10-30 17:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-10 08:32 - 2014-12-10 08:32 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-09 22:23 - 2014-11-09 21:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-09 22:23 - 2014-11-09 20:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-09 22:23 - 2014-10-30 18:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-09 22:23 - 2014-10-30 18:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-09 22:22 - 2014-11-21 22:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-09 22:22 - 2014-11-21 21:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-09 22:21 - 2014-11-21 21:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-09 22:21 - 2014-11-21 21:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-09 22:21 - 2014-11-21 21:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-09 22:21 - 2014-11-21 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-09 22:21 - 2014-11-21 21:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-09 22:21 - 2014-11-21 21:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-09 22:21 - 2014-11-21 21:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-09 22:21 - 2014-11-21 21:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-09 22:21 - 2014-11-21 21:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-09 22:21 - 2014-11-21 21:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-09 22:21 - 2014-11-21 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-09 22:21 - 2014-11-21 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-09 22:21 - 2014-11-21 21:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-09 22:21 - 2014-11-21 20:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-09 22:21 - 2014-11-21 20:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-09 22:21 - 2014-11-21 20:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-09 22:21 - 2014-11-21 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-09 22:21 - 2014-11-21 20:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-09 22:21 - 2014-11-21 20:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-09 22:21 - 2014-11-21 20:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-09 22:21 - 2014-11-21 20:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-09 22:21 - 2014-11-21 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-09 22:21 - 2014-11-21 20:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-09 22:21 - 2014-11-21 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-09 22:21 - 2014-11-21 20:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-09 22:21 - 2014-11-21 20:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-09 22:21 - 2014-11-21 20:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-09 22:21 - 2014-11-21 20:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-09 22:21 - 2014-11-21 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-09 22:21 - 2014-11-21 20:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-09 22:21 - 2014-11-21 20:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-09 22:21 - 2014-11-21 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-09 22:21 - 2014-11-21 20:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-09 22:21 - 2014-11-21 20:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-09 22:21 - 2014-11-21 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-09 22:21 - 2014-11-21 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-09 22:21 - 2014-11-21 19:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-09 22:20 - 2014-12-03 18:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-09 22:20 - 2014-12-03 18:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-09 22:20 - 2014-12-02 18:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-09 22:20 - 2014-12-02 18:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-09 22:20 - 2014-12-02 18:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-09 22:20 - 2014-12-02 18:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-09 22:20 - 2014-12-02 18:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-09 22:20 - 2014-11-06 23:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-09 22:20 - 2014-11-06 22:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-09 11:13 - 2014-12-09 11:13 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Intuit
2014-12-07 10:32 - 2014-12-07 10:32 - 00000000 ____D () C:\Users\Angela\AppData\Local\CrashDumps
2014-12-06 10:23 - 2014-12-06 10:25 - 00002082 _____ () C:\Users\Mia\Desktop\HelloKitty.lnk
2014-12-06 10:23 - 2014-12-06 10:25 - 00002082 _____ () C:\Users\Guest\Desktop\HelloKitty.lnk
2014-12-06 10:23 - 2014-12-06 10:25 - 00002082 _____ () C:\Users\Cole\Desktop\HelloKitty.lnk
2014-12-06 10:23 - 2014-12-06 10:25 - 00002082 _____ () C:\Users\Angela\Desktop\HelloKitty.lnk
2014-12-06 10:23 - 2014-12-06 10:23 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ValuSoft
2014-12-06 10:23 - 2014-12-06 10:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ValuSoft
2014-12-06 10:22 - 2014-12-06 10:22 - 00000000 ____D () C:\Program Files (x86)\ValuSoft
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-05 22:03 - 2014-08-08 22:32 - 01662464 ___SH () C:\Users\Nicole\Desktop\Thumbs.db
2015-01-05 22:01 - 2014-08-07 17:27 - 00004960 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for HOME-Nicole home
2015-01-05 22:00 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-05 21:55 - 2014-01-05 19:06 - 01551693 _____ () C:\Windows\WindowsUpdate.log
2015-01-05 21:52 - 2014-08-25 12:30 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-05 21:51 - 2014-08-20 12:36 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001UA.job
2015-01-05 21:28 - 2014-04-12 16:06 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-05 20:38 - 2014-01-06 20:41 - 00000000 __RDO () C:\Users\Nicole\SkyDrive
2015-01-05 20:15 - 2014-03-28 21:19 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Adobe
2015-01-05 20:14 - 2014-08-25 12:30 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-05 18:27 - 2014-08-08 20:01 - 00000511 _____ () C:\Users\Angela\Desktop\Nick Jr. Preschool Kids Games, Preschool Activities & Lesson Plans.website
2015-01-05 17:39 - 2014-12-01 15:53 - 00004962 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for home-Angela home
2015-01-05 17:09 - 2014-08-08 19:59 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-936412100-4191080330-638901748-1010
2015-01-05 12:05 - 2014-08-15 11:05 - 00000368 _____ () C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Nicole).job
2015-01-05 09:57 - 2014-08-11 10:37 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-936412100-4191080330-638901748-1008
2015-01-05 09:03 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-05 08:52 - 2014-08-11 10:43 - 00000000 ___DO () C:\Users\Ryan\OneDrive
2015-01-05 08:52 - 2014-07-28 21:18 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Adobe
2015-01-05 01:51 - 2014-08-20 12:36 - 00000870 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001Core.job
2015-01-04 23:19 - 2014-01-05 16:12 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-936412100-4191080330-638901748-1001
2015-01-04 23:12 - 2014-07-28 21:01 - 00001474 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-01-04 22:48 - 2014-01-05 19:10 - 00896536 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-04 22:44 - 2013-08-22 09:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-04 22:43 - 2014-01-05 19:02 - 00246188 _____ () C:\Windows\PFRO.log
2015-01-04 22:43 - 2013-08-22 08:25 - 01048576 ___SH () C:\Windows\system32\config\BBI
2015-01-04 22:42 - 2014-03-28 18:33 - 00002874 _____ () C:\ProgramData\hpzinstall.log
2015-01-04 22:38 - 2014-08-15 11:05 - 00000000 ____D () C:\Program Files\SlimCleaner Plus
2015-01-04 22:34 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-04 22:32 - 2014-03-28 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-01-04 22:00 - 2014-08-15 11:05 - 00000000 ____D () C:\Users\Nicole\AppData\Local\SlimWare Utilities Inc
2015-01-04 22:00 - 2014-08-15 11:05 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Downloaded Installers
2015-01-04 21:49 - 2014-01-05 16:13 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{93D96854-AE14-4947-B2FD-D47A2DBC08CC}
2015-01-04 16:57 - 2014-06-29 11:05 - 00000000 ____D () C:\ProgramData\Sonos,_Inc
2015-01-04 16:53 - 2014-03-28 18:41 - 00000000 ____D () C:\Users\Nicole\Documents\My Scans
2015-01-03 21:14 - 2014-07-16 22:03 - 00003906 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{ADE1C2EC-46B8-4BF0-834D-1549DBB3B4B3}
2015-01-03 19:20 - 2014-08-08 19:58 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{BCD630EF-C78D-40CF-97FC-19F681F425BB}
2015-01-03 16:22 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\rescache
2015-01-03 15:57 - 2014-03-28 18:40 - 00000000 ____D () C:\Users\Nicole\AppData\Local\HP
2015-01-02 19:33 - 2014-07-16 22:04 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-936412100-4191080330-638901748-1006
2015-01-02 18:32 - 2014-07-16 22:00 - 00000000 ___RD () C:\Users\Cole\OneDrive
2015-01-01 13:36 - 2014-08-16 22:51 - 02067456 ___SH () C:\Users\Nicole\Downloads\Thumbs.db
2015-01-01 11:40 - 2014-01-05 19:06 - 00000000 ____D () C:\Users\Nicole
2015-01-01 10:28 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-01 10:28 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-01 10:28 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-01-01 10:28 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\setup
2015-01-01 10:22 - 2014-01-07 21:09 - 00000000 ____D () C:\HP Universal Print Driver
2015-01-01 10:15 - 2014-03-28 18:33 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-01 10:14 - 2014-11-28 11:59 - 00000104 _____ () C:\Windows\SysWOW64\msiexec.log
2015-01-01 10:14 - 2014-03-28 18:23 - 00000000 ____D () C:\ProgramData\HP
2015-01-01 10:13 - 2014-11-28 11:59 - 00000198 _____ () C:\Windows\system32\AddPort.ini
2015-01-01 10:09 - 2013-08-22 10:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-01 02:04 - 2014-09-09 16:56 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-12-31 00:23 - 2014-03-28 21:20 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-12-30 23:36 - 2013-08-22 09:44 - 02709016 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-30 22:46 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-30 15:34 - 2014-11-17 11:52 - 00000034 _____ () C:\Users\Ryan\AppData\Roaming\AdobeWLCMCache.dat
2014-12-30 12:38 - 2014-09-04 15:11 - 00000000 ____D () C:\Users\Ryan\AppData\Local\HP
2014-12-30 10:44 - 2014-07-28 21:17 - 00000000 ____D () C:\Users\Ryan\AppData\Roaming\Adobe
2014-12-30 10:41 - 2014-11-17 11:53 - 00001068 _____ () C:\Users\Ryan\Documents\DesignLibrary_Illustrator.log
2014-12-29 08:18 - 2014-07-28 21:17 - 00000000 ____D () C:\Users\Ryan\AppData\Local\Packages
2014-12-28 00:10 - 2014-09-23 23:01 - 00000000 ____D () C:\Users\Nicole\Downloads\PROMESH Two
2014-12-27 11:55 - 2014-01-05 19:06 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Packages
2014-12-26 23:53 - 2014-10-14 19:46 - 00000000 ____D () C:\ProgramData\TechSmith
2014-12-26 22:42 - 2014-10-14 19:47 - 00000000 ____D () C:\Users\Nicole\AppData\Local\CrashDumps
2014-12-26 19:58 - 2014-08-08 19:54 - 00000000 ____D () C:\Users\Angela\AppData\Local\Packages
2014-12-25 23:04 - 2014-07-17 12:49 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-936412100-4191080330-638901748-1007
2014-12-25 20:23 - 2014-07-17 12:46 - 00003902 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{52D962D9-F617-41EB-AD19-5E3210CE0CF1}
2014-12-23 22:29 - 2014-10-28 22:02 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\Apple Computer
2014-12-23 22:29 - 2013-08-22 09:46 - 00027241 _____ () C:\Windows\setupact.log
2014-12-23 11:19 - 2014-11-17 11:32 - 00000000 ____D () C:\Users\Ryan\AppData\Local\CrashDumps
2014-12-23 00:30 - 2014-07-15 21:55 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-21 20:07 - 2014-07-16 21:59 - 00000000 ____D () C:\Users\Cole\AppData\Roaming\Bitdefender
2014-12-21 20:02 - 2014-08-28 18:53 - 00000000 ____D () C:\Users\Cole\AppData\Local\Google
2014-12-21 04:10 - 2014-11-11 20:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-21 04:10 - 2014-11-11 20:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-21 04:10 - 2014-11-11 20:28 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-21 04:10 - 2014-11-11 20:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-20 20:16 - 2014-06-29 11:05 - 00000000 ____D () C:\Users\Nicole\AppData\Local\Downloaded Installations
2014-12-20 20:16 - 2014-06-29 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonos
2014-12-20 20:16 - 2014-06-29 11:05 - 00000000 ____D () C:\Program Files (x86)\Sonos
2014-12-18 22:04 - 2014-04-12 16:06 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-17 23:59 - 2014-03-28 18:34 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\HpUpdate
2014-12-17 23:49 - 2013-08-22 10:36 - 00000000 ___RD () C:\Windows\Offline Web Pages
2014-12-17 23:48 - 2014-01-19 07:15 - 00000000 ____D () C:\Windows\Minidump
2014-12-17 11:12 - 2014-11-03 22:13 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2014-12-17 11:12 - 2014-08-13 04:25 - 00084336 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2014-12-16 23:08 - 2014-11-26 18:57 - 00001524 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix Receiver.lnk
2014-12-16 23:08 - 2014-09-29 23:22 - 00000000 ____D () C:\Program Files (x86)\Citrix
2014-12-16 23:07 - 2014-07-30 21:55 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\Download Manager
2014-12-14 19:59 - 2014-08-23 21:28 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-12-14 19:59 - 2014-08-23 21:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-12-14 13:49 - 2014-08-23 21:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-12-12 16:34 - 2014-08-06 11:42 - 00001396 _____ () C:\Users\Mia\Desktop\ROBLOX Player.lnk
2014-12-12 16:34 - 2014-08-06 11:25 - 00000000 ____D () C:\Users\Mia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2014-12-11 15:56 - 2014-11-10 18:52 - 00001214 _____ () C:\Users\Angela\Desktop\ROBLOX Studio.lnk
2014-12-11 15:56 - 2014-08-08 21:25 - 00001399 _____ () C:\Users\Angela\Desktop\ROBLOX Player.lnk
2014-12-11 15:56 - 2014-08-08 21:25 - 00000000 ____D () C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2014-12-10 19:01 - 2014-08-27 16:45 - 00000000 ____D () C:\Users\Angela\AppData\Local\Google
2014-12-10 08:32 - 2014-07-12 12:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-10 08:32 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-10 07:17 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-10 07:17 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-10 07:16 - 2014-01-05 16:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 00:34 - 2014-01-05 16:21 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-09 19:12 - 2014-07-28 21:44 - 00000000 ____D () C:\Users\Mia\AppData\Local\Windows Live
2014-12-07 20:56 - 2014-08-08 19:54 - 00000000 ____D () C:\Users\Angela
2014-12-07 20:10 - 2014-03-09 17:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-06 10:24 - 2014-07-30 21:18 - 00001326 _____ () C:\Windows\DirectX.log
Files to move or delete:
====================
C:\Users\Nicole\hpbcfgre.dll
C:\Users\Nicole\hpmco160.dll
C:\Users\Nicole\hpmews02.dll
C:\Users\Nicole\hpmldm02.dll
C:\Users\Nicole\hpmprein.dll
C:\Users\Nicole\Install.dll
C:\Users\Nicole\Install.exe
C:\Users\Nicole\msvcp100.dll
Some content of TEMP:
====================
C:\Users\Nicole\AppData\Local\Temp\cstub.exe
C:\Users\Nicole\AppData\Local\Temp\scp916D.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-31 09:16
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2015
Ran by [removed] at 2015-01-05 22:07:15
Running from C:\Users\[removed]\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden
Adobe Acrobat 8 Professional (HKLM-x32\…\Adobe Acrobat 8 Professional) (Version: 8.0.0 - Adobe Systems)
Adobe Creative Cloud (HKLM-x32\…\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\…\Adobe_719d6f144d0c086a0dfa7ff76bb9ac1) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\…\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Apple Application Support (HKLM-x32\…\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\…\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\…\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bitdefender Total Security 2015 (HKLM\…\Bitdefender) (Version: 18.17.0.1227 - Bitdefender)
Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Citrix Receiver (HKLM-x32\…\CitrixOnlinePluginPackWeb) (Version: 14.2.0.10 - Citrix Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.0.0 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Free Screen Capture (HKLM-x32\…\{B5803DCA-1A6F-48BA-9401-D4599122D7D7}) (Version: 1.0.0 - Free Picture Solutions)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\…\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Talk Plugin (HKLM-x32\…\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\…\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HelloKitty (remove only) (HKLM-x32\…\HelloKitty) (Version: - )
HP Color LaserJet Pro MFP M476 (HKLM-x32\…\{4b849805-3b07-4b35-874a-705c0d103672}) (Version: 10.0.13302.320 - Hewlett-Packard)
HP Imaging Device Functions 14.5 (HKLM\…\HP Imaging Device Functions) (Version: 14.5 - HP)
HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPCLJProMFPM476 (HKLM-x32\…\{C44C593D-3009-4D03-910E-243050C5E193}) (Version: 0.05.0000 - Hewlett-Packard)
HPDXP (x32 Version: 3.0.26.15 - HP) Hidden
HPLJDXPHelper (x32 Version: 060.048.005 - HP) Hidden
HPLJUTCore (x32 Version: [removed] - HP) Hidden
HPLJUTM476 (x32 Version: [removed] - HP) Hidden
hppLaserJetService (x32 Version: 009.033.00906 - Hewlett-Packard) Hidden
hppM276LaserJetService (x32 Version: 001.019.00639 - Hewlett-Packard) Hidden
hppM476LaserJetService (x32 Version: 001.034.00634 - Hewlett-Packard) Hidden
hpStatusAlerts (x32 Version: 100.040.00198 - Hewlett Packard) Hidden
hpStatusAlertsM476 (x32 Version: 100.046.00121 - Hewlett-Packard) Hidden
iTunes (HKLM\…\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LJDXPHelperUI (x32 Version: 060.048.005 - HP) Hidden
MapsGalaxy Internet Explorer Toolbar (HKLM-x32\…\MapsGalaxy_39bar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION
Microsoft .NET Framework 1.1 (HKLM-x32\…\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft Office Professional Plus 2013 - en-us (HKLM\…\ProPlusRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 34.0 (x86 en-US)) (Version: 34.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\…\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NETGEAR Genie (HKLM-x32\…\NETGEAR Genie) (Version: 2.3.1.13 - NETGEAR Inc.)
Nuance Power PDF Advanced (HKLM\…\{BD71D245-1A8B-4FB3-83E4-74F77FB39267}) (Version: 1.00.7472 - Nuance Communications, Inc.)
Nuance Power PDF Hotfix-14219.939.14357 (HKLM-x32\…\{E462B5A4-C4A8-4128-BC3B-14885102B95A}) (Version: 1.00.14357 - Nuance Communications, Inc.)
OCR Software by I.R.I.S. 14.5 (HKLM\…\HPOCR) (Version: 14.5 - HP)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Online Plug-in (x32 Version: 14.2.0.10 - Citrix Systems, Inc.) Hidden
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
QuickBooks Product Listing Service (HKLM-x32\…\{054C3038-FFAC-446D-9682-E25891DC2E05}) (Version: 2.0.132 - Intuit)
QuickBooks Simple Start Edition (HKLM-x32\…\{7E545666-F420-45FD-B3DF-C0B99A1A579F}) (Version: - )
QuickTime 7 (HKLM-x32\…\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Self-service Plug-in (x32 Version: 4.2.0.2495 - Citrix Systems, Inc.) Hidden
Sonos Controller (HKLM-x32\…\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 28.1.83040 - Sonos, Inc.)
SupportSoft Assisted Service (HKLM-x32\…\{5A3F6A80-7913-475E-8B96-477A952CFA43}) (Version: 15 - SupportSoft)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-936412100-4191080330-638901748-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-936412100-4191080330-638901748-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-936412100-4191080330-638901748-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-936412100-4191080330-638901748-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
==================== Restore Points =========================
26-12-2014 19:03:29 Scheduled Checkpoint
31-12-2014 00:20:38 Removed Adobe Reader XI (11.0.09).
01-01-2015 02:04:20 Installed Nuance Power PDF Advanced.
04-01-2015 22:07:14 Removed DriverUpdate
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 08:25 - 2015-01-04 22:22 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {11C3D074-410A-4731-A245-03467CAABDF2} - System32\Tasks\{6A419E9D-ADE8-4556-9501-5EF35DE4868D} => pcalua.exe -a "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" -c scenario=Repair platform=x64 culture=en-us
Task: {1AA24192-C6B7-4A56-A8B2-6F95C4674268} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-10] (Microsoft Corporation)
Task: {29381432-2970-407C-B2A3-25DC8B2BDAAC} - System32\Tasks\Microsoft Office 15 Sync Maintenance for HOME-Ryan home => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: {3082840B-ED0C-45CE-9ADD-888C3826E207} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-10-07] (Microsoft Corporation)
Task: {35A2B38C-BE8E-4C2F-B668-0AFC90A7BA3D} - System32\Tasks\DriverUpdate Startup => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: {47032E51-838F-4757-B0B4-8CA51C9046E3} - System32\Tasks\{852464B3-9C55-423E-9D71-6C559981111E} => pcalua.exe -a "C:\Users\Nicole\AppData\Roaming\1H1Q1V1N1N1O1R\File Opener Packages\uninstaller.exe" -c /Uninstall /NM="File Opener Packages" /AN="1H1Q1V1N1N1O1R" /MBN="File Opener Packages"
Task: {4F877F99-7915-4D8E-8FBF-4B6F22748C7E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-18] (Adobe Systems Incorporated)
Task: {569885AC-5E50-44BD-BF8E-16013CB34E9B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-10-07] (Microsoft Corporation)
Task: {5E99B95B-0593-4B67-8D88-42DAE251A873} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {69CCF445-4AA0-4343-8D17-3A73AD7515EA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001Core => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2014-08-20] (Google Inc.)
Task: {769EA99E-A08E-4ED9-9DF0-BE5798D36BB6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {811EBFAD-E813-4AAE-9DF2-0A31AEDDB907} - System32\Tasks\{24515BF0-9C1B-45C3-9E27-163C1B0E83C1} => pcalua.exe -a "C:\Program Files (x86)\HP\Digital Imaging\{6F0EFDE0-EFEB-41CA-9446-ACB7A942911E}\setup\hpzscr40.exe" -c -datfile hpgscr39.dat
Task: {8A98CDB1-6BB8-4999-AAE9-B24804D88DE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25] (Google Inc.)
Task: {955D9F40-68DB-4300-B33D-0622038B5943} - System32\Tasks\DriverUpdate Scan => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: {A735A0D7-160C-4E15-A216-5F72A8412B93} - System32\Tasks\Microsoft Office 15 Sync Maintenance for HOME-Nicole home => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: {B557E2DC-7D28-4BF8-9954-06A400A37E15} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Nicole) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {B9466B13-563A-4228-824D-74121A63130C} - System32\Tasks\Microsoft Office 15 Sync Maintenance for home-Angela home => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: {C66E39CE-0F08-4D40-9B6B-DB0184D38E12} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001UA => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2014-08-20] (Google Inc.)
Task: {D23FFB4A-8B3B-4163-96F9-8B033797A535} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25] (Google Inc.)
Task: {D5F6A6C3-323D-4CAD-A222-A77AA41C9C7E} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {F448A4B9-DAFF-4F50-A4C3-2868218A4B2A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FA7DC91B-05D8-4284-833C-08CF3A633032} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2013-04-16] (Hewlett Packard)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverUpdate Scan.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\Windows\Tasks\DriverUpdate Startup.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001Core.job => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-936412100-4191080330-638901748-1001UA.job => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Nicole).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
==================== Loaded Modules (whitelisted) =============
2014-11-03 22:13 - 2014-08-27 16:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-11-03 22:13 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2014-11-03 22:13 - 2014-10-02 15:19 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-11-03 22:13 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-11-03 22:13 - 2014-07-24 09:44 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpbr.mdl
2014-11-03 22:13 - 2014-07-24 09:44 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpdsp.mdl
2014-11-03 22:13 - 2014-07-24 09:44 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpph.mdl
2014-11-03 22:13 - 2014-07-24 09:44 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttprbl.mdl
2014-07-15 21:55 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-16 10:06 - 2014-07-16 10:06 - 00672416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-11-19 16:57 - 2014-09-23 08:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll
2012-11-27 02:54 - 2012-11-27 02:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-11-14 08:12 - 2013-11-14 08:12 - 00105216 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe
2014-10-11 12:06 - 2014-10-11 12:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00544817 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libgcc_s_dw2-1.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00989805 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libstdc++-6.dll
2013-09-28 20:14 - 2013-09-28 20:14 - 03369922 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuin51.dll
2013-09-28 20:14 - 2013-09-28 20:14 - 01978690 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuuc51.dll
2013-09-28 20:14 - 2013-09-28 20:14 - 22378434 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icudt51.dll
2013-09-28 20:14 - 2013-09-28 20:14 - 01233408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\platforms\qwindows.dll
2013-11-13 05:22 - 2013-11-13 05:22 - 00467456 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\Genie.dll
2013-11-10 20:57 - 2013-11-10 20:57 - 01547776 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SvtNetworkTool.dll
2013-11-10 20:59 - 2013-11-10 20:59 - 00192512 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Airprint.dll
2013-11-10 21:01 - 2013-11-10 21:01 - 00632320 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Internet.dll
2013-11-13 22:53 - 2013-11-13 22:53 - 04956160 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Map.dll
2013-11-13 04:05 - 2013-11-13 04:05 - 00427520 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll
2013-11-10 20:58 - 2013-11-10 20:58 - 00144896 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DragonNetTool.dll
2013-11-10 21:09 - 2013-11-10 21:09 - 01174528 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll
2013-11-10 21:13 - 2013-11-10 21:13 - 08557056 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Resource.dll
2013-11-13 05:17 - 2013-11-13 05:17 - 01269248 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll
2013-11-10 20:59 - 2013-11-10 20:59 - 00068608 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QRCode.dll
2013-11-10 21:17 - 2013-11-10 21:17 - 00198656 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Statistics.dll
2013-11-12 03:07 - 2013-11-12 03:07 - 00884736 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Ui.dll
2013-11-10 21:21 - 2013-11-10 21:21 - 00427520 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Wireless.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qgif.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00052224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qico.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00261120 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qjpeg.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qsvg.dll
2013-11-10 20:58 - 2013-11-10 20:58 - 00078848 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnosePlugin.dll
2013-11-10 20:56 - 2013-11-10 20:56 - 00140288 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnoseDll.dll
2012-11-29 04:56 - 2012-11-29 04:56 - 03332720 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\drivers\libntgr_api.dll
2013-11-10 20:56 - 2013-11-10 20:56 - 00072192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SVTUtils.dll
2013-11-10 20:56 - 2013-11-10 20:56 - 00074752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NetcardApi.dll
2013-11-10 20:56 - 2013-11-10 20:56 - 00136704 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\airprintdll.dll
2013-11-10 21:18 - 2013-11-10 21:18 - 00641536 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_Update.dll
2013-11-10 21:24 - 2013-11-10 21:24 - 00458752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll
2013-11-10 21:23 - 2013-11-10 21:23 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupApiPlugin.dll
2013-11-10 20:56 - 2013-11-10 20:56 - 00066560 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupDll.dll
2013-09-28 20:13 - 2013-09-28 20:13 - 00040960 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll
2015-01-05 20:14 - 2015-01-05 20:14 - 00098816 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32api.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00110080 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\pywintypes27.dll
2015-01-05 20:14 - 2015-01-05 20:14 - 00364544 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\pythoncom27.dll
2015-01-05 20:14 - 2015-01-05 20:14 - 00045568 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_socket.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 01160704 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_ssl.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00320512 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32com.shell.shell.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00713216 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_hashlib.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 01175040 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._core_.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00805888 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._gdi_.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00811008 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._windows_.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 01062400 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._controls_.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00735232 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._misc_.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00128512 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_elementtree.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00127488 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\pyexpat.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00557056 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\pysqlite2._sqlite.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00087552 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_ctypes.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00119808 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32file.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00108544 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32security.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00007168 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\hashobjs_ext.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00167936 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32gui.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00018432 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32event.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00038912 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32inet.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00011264 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32crypt.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00070656 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._html2.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00027136 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\_multiprocessing.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00035840 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32process.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00686080 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\unicodedata.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00122368 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._wizard.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00024064 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32pipe.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00025600 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32pdh.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00525640 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\windows._lib_cacheinvalidation.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00010240 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\select.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00017408 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32profile.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00022528 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\win32ts.pyd
2015-01-05 20:14 - 2015-01-05 20:14 - 00078336 _____ () C:\Users\Nicole\AppData\Local\Temp\_MEI96082\wx._animate.pyd
2014-12-05 23:23 - 2014-12-05 23:23 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Windows\WLXPGSS.SCR:AGC
AlternateDataStreams: C:\Windows\system32\GfxUI.exe:AGC
AlternateDataStreams: C:\ProgramData\TEMP:F9CFE070
AlternateDataStreams: C:\Users\Cole\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Cole\Desktop\Minecraft.exe:BDU
AlternateDataStreams: C:\Users\Nicole\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Nicole\Desktop\aswMBR.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Desktop\FRST64.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Desktop\HijackThis.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Desktop\jre-6-windows-amd64.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Desktop\SonosDesktopController50.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\aswMBR.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\cbsidlm-cbsi213-Free_Screen_Capture-SEO-76038565.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\ChromeSetup.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\CitrixReceiver(1).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\CitrixReceiver(2).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\CitrixReceiver(3).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\CitrixReceiver.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\CP2020_Series_FW_Update-20130923.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\FileOpenerSetup.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\FRST64.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\GoogleVoiceAndVideoSetup.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\InternationalPrimoPDF.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\LJPro-MFP-M476-Full-Solution-13302(1).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\LJPro-MFP-M476-Full-Solution-13302.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\M476_Color_MFP_Series_FW_Update-20140826(1).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\M476_Color_MFP_Series_FW_Update-20140826.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\pixie.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\product_download.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\ReceiverCleanupUtility.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\Silverlight_x64.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\snagit.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\upd-pcl6-x64-5.8.0.17508.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\upd-pcl6-x64-6.0.0.18849.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\upd-ps-x64-6.0.0.18849.exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\wlsetup-web(1).exe:BDU
AlternateDataStreams: C:\Users\Nicole\Downloads\wlsetup-web.exe:BDU
AlternateDataStreams: C:\Users\Ryan\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
HKLM\…\StartupApproved\StartupFolder: => "Adobe Acrobat Synchronizer.lnk"
HKLM\…\StartupApproved\StartupFolder: => "QuickBooks Update Agent.lnk"
HKLM\…\StartupApproved\StartupFolder: => "Snagit 12.lnk"
HKLM\…\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\…\StartupApproved\Run32: => "ConnectionCenter"
HKLM\…\StartupApproved\Run32: => "Redirector"
HKLM\…\StartupApproved\Run32: => "MapsGalaxy EPM Support"
HKLM\…\StartupApproved\Run32: => "Adobe ARM"
HKLM\…\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\StartupApproved\StartupFolder: => "Send to OneNote.lnk"
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\StartupApproved\Run: => "swg"
HKU\S-1-5-21-936412100-4191080330-638901748-1001\…\StartupApproved\Run: => "GoogleChromeAutoLaunch_18F9ED406E377D72992EE1809DE354B5"
========================= Accounts: ==========================
Administrator (S-1-5-21-936412100-4191080330-638901748-500 - Administrator - Disabled)
Angela (S-1-5-21-936412100-4191080330-638901748-1010 - Limited - Enabled) => C:\Users\Angela
ASPNET (S-1-5-21-936412100-4191080330-638901748-1011 - Limited - Enabled)
Cole (S-1-5-21-936412100-4191080330-638901748-1006 - Limited - Enabled) => C:\Users\Cole
Guest (S-1-5-21-936412100-4191080330-638901748-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-936412100-4191080330-638901748-1003 - Limited - Enabled)
Mia (S-1-5-21-936412100-4191080330-638901748-1007 - Limited - Enabled) => C:\Users\Mia
Nicole (S-1-5-21-936412100-4191080330-638901748-1001 - Administrator - Enabled) => C:\Users\Nicole
Ryan (S-1-5-21-936412100-4191080330-638901748-1008 - Limited - Enabled) => C:\Users\Ryan
Sonos (S-1-5-21-936412100-4191080330-638901748-1009 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
Name: Unknown USB Device (Device Descriptor Request Failed)
Description: Unknown USB Device (Device Descriptor Request Failed)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard USB Host Controller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: Dell 3333dn/3335dn
Description: Dell 3333dn/3335dn
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Dell
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/05/2015 08:38:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: skydrive.exe, version: 6.3.9600.17484, time stamp: 0x545d76bd
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x00000000
Fault offset: 0x0000000000000000
Faulting process id: 0x19a8
Faulting application start time: 0xskydrive.exe0
Faulting application path: skydrive.exe1
Faulting module path: skydrive.exe2
Report Id: skydrive.exe3
Faulting package full name: skydrive.exe4
Faulting package-relative application ID: skydrive.exe5
Error: (01/05/2015 08:14:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 12 [removed].in-addr.arpa. PTR home.local.
Error: (01/05/2015 08:14:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.6:5353 14 [removed].in-addr.arpa. PTR home-2.local.
Error: (01/05/2015 08:14:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: skydrive.exe, version: 6.3.9600.17484, time stamp: 0x545d76bd
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x00000000
Fault offset: 0x0000000000000000
Faulting process id: 0x1348
Faulting application start time: 0xskydrive.exe0
Faulting application path: skydrive.exe1
Faulting module path: skydrive.exe2
Report Id: skydrive.exe3
Faulting package full name: skydrive.exe4
Faulting package-relative application ID: skydrive.exe5
Error: (01/05/2015 06:44:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: ntdll.dll, version: 6.3.9600.17476, time stamp: 0x54516af9
Exception code: 0xc015000f
Fault offset: 0x000a4347
Faulting process id: 0xa48
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
Error: (01/05/2015 06:44:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Exception code: 0xc0000005
Fault offset: 0x00027c95
Faulting process id: 0xa48
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
Error: (01/05/2015 06:36:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: ntdll.dll, version: 6.3.9600.17476, time stamp: 0x54516af9
Exception code: 0xc015000f
Fault offset: 0x000a4347
Faulting process id: 0x2d24
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
Error: (01/05/2015 06:36:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Exception code: 0xc0000005
Fault offset: 0x00027c95
Faulting process id: 0x2d24
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
Error: (01/05/2015 06:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: ntdll.dll, version: 6.3.9600.17476, time stamp: 0x54516af9
Exception code: 0xc015000f
Fault offset: 0x000a4347
Faulting process id: 0x1680
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
Error: (01/05/2015 06:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Faulting module name: NPDFLM.exe, version: 1.0.14357.100, time stamp: 0x53b9e6bd
Exception code: 0xc0000005
Fault offset: 0x00027c95
Faulting process id: 0x1680
Faulting application start time: 0xNPDFLM.exe0
Faulting application path: NPDFLM.exe1
Faulting module path: NPDFLM.exe2
Report Id: NPDFLM.exe3
Faulting package full name: NPDFLM.exe4
Faulting package-relative application ID: NPDFLM.exe5
System errors:
=============
Error: (01/05/2015 03:04:21 PM) (Source: DCOM) (EventID: 10016) (User: home)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}homeRyanS-1-5-21-936412100-4191080330-638901748-1008LocalHost (Using LRPC)UnavailableUnavailable
Error: (01/05/2015 05:28:37 AM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT AUTHORITY)
Description: I:\Device\HarddiskVolume73
Error: (01/04/2015 10:45:36 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The HP LaserJet Service service hung on starting.
Error: (01/04/2015 10:43:07 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {548E275F-0290-40E7-B454-738B0C61DE60}
Error: (01/04/2015 10:35:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The HP LaserJet Service service hung on starting.
Error: (01/04/2015 10:31:54 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error: (01/04/2015 10:29:54 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error: (01/04/2015 10:27:54 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error: (01/04/2015 10:13:43 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {B6C292BC-7C88-41EE-8B54-8EC92617E599}
Error: (01/04/2015 06:18:49 PM) (Source: DCOM) (EventID: 10010) (User: HOME)
Description: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Microsoft Office Sessions:
=========================
Error: (01/05/2015 08:38:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: skydrive.exe6.3.9600.17484545d76bdunknown0.0.0.00000000000000000000000000000000019a801d02951871c5223C:\Windows\System32\skydrive.exeunknownc4f382c6-9544-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 08:14:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 12 [removed].in-addr.arpa. PTR home.local.
Error: (01/05/2015 08:14:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.6:5353 14 [removed].in-addr.arpa. PTR home-2.local.
Error: (01/05/2015 08:14:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: skydrive.exe6.3.9600.17484545d76bdunknown0.0.0.000000000000000000000000000000000134801d0294e271af7abC:\Windows\System32\skydrive.exeunknown65817dcd-9541-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:44:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdntdll.dll6.3.9600.1747654516af9c015000f000a4347a4801d029418d352a8dC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Windows\SYSTEM32\ntdll.dllcbcdc1f3-9534-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:44:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdNPDFLM.exe1.0.14357.10053b9e6bdc000000500027c95a4801d029418d352a8dC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.execb673cb6-9534-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:36:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdntdll.dll6.3.9600.1747654516af9c015000f000a43472d2401d029406a66344eC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Windows\SYSTEM32\ntdll.dlla8f7ac93-9533-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:36:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdNPDFLM.exe1.0.14357.10053b9e6bdc000000500027c952d2401d029406a66344eC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exea89aa841-9533-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdntdll.dll6.3.9600.1747654516af9c015000f000a4347168001d028eeea11e0f5C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Windows\SYSTEM32\ntdll.dlla574b58e-9533-11e4-82c9-20cf30cb72cf
Error: (01/05/2015 06:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NPDFLM.exe1.0.14357.10053b9e6bdNPDFLM.exe1.0.14357.10053b9e6bdc000000500027c95168001d028eeea11e0f5C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exeC:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exea504a03d-9533-11e4-82c9-20cf30cb72cf
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Percentage of memory in use: 50%
Total physical RAM: 6031.05 MB
Available physical RAM: 3009.97 MB
Total Pagefile: 6991.05 MB
Available Pagefile: 3587.62 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.17 GB) (Free:673.48 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7AE04791)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)
==================== End Of Log ============================
I also included a hijack this log…..
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 8:23:35 PM, on 1/5/2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
FIREFOX: 34.0 (x86 en-US)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe
C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39brmon.exe
C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\ProgramData\FLEXnet\Connect\11\agent.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe
C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Nicole\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\PROGRA~2\MAPSGA~2\bar\1.bin\39bar.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Nuance PDF Toolbar Helper - {940361F8-7F16-4498-AB43-2EFFE0235AFA} - C:\Program Files (x86)\Nuance\Power PDF\Bin\SZeonIEFavClient.dll
O2 - BHO: PlusIEEventHelper Class - {9D137966-2E29-45C5-9B12-29D5427F8F66} - C:\Program Files (x86)\Nuance\Power PDF\Bin\PlusIEContextMenu.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll
O3 - Toolbar: Nuance PDF - {BED78D9C-A025-4FE9-B3BA-27E6D376A3D5} - C:\Program Files (x86)\Nuance\Power PDF\Bin\SZeonIEFavClient.dll
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" –showwindow=false –onOSstartup=true
O4 - HKLM\..\Run: [MapsGalaxy Search Scope Monitor] "C:\PROGRA~2\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [MapsGalaxy_39 Browser Plugin Loader] C:\PROGRA~2\MAPSGA~2\bar\1.bin\39brmon.exe
O4 - HKLM\..\Run: [MapsGalaxy_39 Browser Plugin Loader 64] C:\PROGRA~2\MAPSGA~2\bar\1.bin\39brmon64.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\ProgramData\FLEXnet\Connect\11\isuspm.exe" -scheduler
O4 - HKLM\..\Run: [PowerPDF Registry Controller] "C:\Program Files (x86)\Nuance\Power PDF\RegistryController.exe"
O4 - HKLM\..\Run: [Nuance Power PDF Advanced-reminder] "C:\Program Files (x86)\Nuance\Power PDF\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\Power PDF Advanced\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [PowerPDFInboxMonitor] "C:\Program Files (x86)\Nuance\Power PDF\InboxMonitor.exe" /run
O4 - HKLM\..\Run: [StatusAlerts] "C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [NuanPowerPdf1NPDFLM] "C:\Program Files (x86)\Nuance\Power PDF\NPDFLM.exe"
O4 - HKCU\..\Run: [NETGEARGenie] "C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe" -mini -redirect
O4 - HKCU\..\Run: [Google Update] "C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_18F9ED406E377D72992EE1809DE354B5] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" –no-startup-window
O4 - HKCU\..\Run: [Bitdefender Wallet Agent] "C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - Startup: Send to OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Open with Convert Assistant - res://C:\Program Files (x86)\Nuance\Power PDF\cnvres_eng.dll /100
O8 - Extra context menu item: Open with Power PDF - res://C:\Program Files (x86)\Nuance\Power PDF\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://ttnauthihsprod1.courts.judiciary.state.nj.us
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://qtinstall.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {55A2C0CD-3DE8-4264-9637-A0B40B05714E} (Mail Migration) - https://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=1547480989
O16 - DPF: {A5A5E1FF-FFEF-3FEF-B592-C6D194F4383F} (Cisco Secure Desktop / HostScan Web Control) - https://vpn1.judiciary.state.nj.us/CACHE/sdesktop/install/binaries/instweb.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bitdefender Desktop Parental Control (BdDesktopParental) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MapsGalaxyService (MapsGalaxy_39Service) - COMPANYVERS_NAME - C:\PROGRA~2\MAPSGA~2\bar\1.bin\39barsvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NETGEARGenieDaemon - NETGEAR - C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
–
End of file - 18722 bytes
