dconant1
Topic Starter
I keep getting the message "Internet Explorer has stopped working." I can't get onto the internet at all, not through IE, Chrome or Firefox. I have Win 7, 64 Bit.
The askMBR log is as follows:
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-07-05 12:20:23
—————————–
12:20:23.907 OS Version: Windows x64 6.1.7601 Service Pack 1
12:20:23.907 Number of processors: 4 586 0x3001
12:20:23.909 ComputerName: DC11-24-14-HP UserName: DC 11-24-14
12:20:27.700 Initialize success
12:20:27.720 VM: initialized successfully
12:20:27.722 VM: Amd CPU BiosDisabled
12:20:30.807 AVAST engine defs: 15070501
12:20:42.480 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:20:42.485 Disk 0 Vendor: TOSHIBA_MQ01ABD075 AX001C Size: 715404MB BusType: 11
12:20:42.635 Disk 0 MBR read successfully
12:20:42.640 Disk 0 MBR scan
12:20:42.649 Disk 0 Windows 7 default MBR code
12:20:42.665 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048
12:20:42.688 Disk 0 default boot code
12:20:42.714 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 690480 MB offset 409600
12:20:42.745 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 24621 MB offset 1414512640
12:20:42.770 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 102 MB offset 1464936448
12:20:42.938 Disk 0 scanning C:\Windows\system32\drivers
12:20:56.925 Service scanning
12:21:44.486 Modules scanning
12:21:44.504 Disk 0 trace - called modules:
12:21:44.537 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
12:21:44.547 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007846060]
12:21:44.563 3 CLASSPNP.SYS[fffff88000fcb43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa800777d680]
12:21:49.557 AVAST engine scan C:\Windows
12:21:54.814 AVAST engine scan C:\Windows\system32
12:27:08.049 AVAST engine scan C:\Windows\system32\drivers
12:27:37.646 AVAST engine scan C:\Users\DC 11-24-14
12:34:21.119 AVAST engine scan C:\ProgramData
12:36:55.443 Disk 0 statistics 4422879/0/0 @ 2.88 MB/s
12:36:55.453 Scan finished successfully
13:29:53.513 Disk 0 MBR has been saved successfully to "C:\Users\DC 11-24-14\Documents\MBR.dat"
13:29:53.532 The log file has been saved successfully to "C:\Users\DC 11-24-14\Documents\aswMBR2.txt"
13:30:14.223 Disk 0 MBR has been saved successfully to "F:\MBR.dat"
13:30:14.252 The log file has been saved successfully to "F:\aswMBR1.txt"
The FRST (shortcut) log is as follows:
Users shortcut scan result (x64) Version:05-07-2015
Ran by [removed] at 2015-07-05 13:36:32
Running from F:\
Boot Mode: Normal
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\SC_Reader.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Access.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\accicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Excel.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\xlicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Outlook.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\pptico.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Word.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\wordicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D; Start Center.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free\ScreenHunter 6.0 Free.lnk -> C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe (Wisdom Software Inc. )
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free\ScreenHunter User Guide.lnk -> C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free\Uninstall.lnk -> C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\UNWISE.EXE ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\RegistryBooster\RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe (Uniblue Systems Limited)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\RegistryBooster\Uninstall RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\unins001.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2014\TurboTax 2014.lnk -> C:\Windows\Installer\{F2283AA1-869C-4497-8F18-09E36C67A014}\TurboTax.exe (Intuit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2013\TurboTax 2013.lnk -> C:\Windows\Installer\{2A4EEB5C-3BA6-4299-A87F-783861B567D9}\TurboTax.exe (Intuit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Create System Report.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLogReport.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\File Scan.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Immunization.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Rootkit Scan.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Spybot-S&D; Start Center.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\System Scan.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Tray Icon (Live Protection).lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Uninstall Spybot-S&D.lnk; -> C:\Program Files (x86)\Spybot - Search & Destroy 2\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4\Smart Defrag 4.lnk -> C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe (IObit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4\Uninstall Smart Defrag 4.lnk -> C:\Program Files (x86)\IObit\Smart Defrag 4\unins001.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection\HP Recovery Manager\HP Recovery Manager.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\Rebecca.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken\Billminder.lnk -> C:\QUICKENW\BILLMIND.EXE (Intuit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken\Quicken 2001 Basic.lnk -> C:\QUICKENW\QW.EXE (Intuit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken\ReadMe.lnk -> C:\QUICKENW\README.WRI ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken\What's New in Quicken 2001 Basic.lnk -> C:\QUICKENW\WHATSNEW.WRI ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\CyberLink LabelPrint.lnk -> C:\Program Files (x86)\CyberLink\LabelPrint\LabelPrint.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\CyberLink Power2Go.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\Power2Go8.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\Desktop Burning Gadget.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\ISO Viewer.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\IsoViewer8.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\Virtual Drive.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\MetaEditor.lnk -> C:\Program Files (x86)\OANDA - MetaTrader\metaeditor.exe (MetaQuotes Software Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\OANDA - MT4.lnk -> C:\Program Files (x86)\OANDA - MetaTrader\terminal.exe (MetaQuotes Software Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OANDA - MetaTrader\Uninstall.lnk -> C:\Program Files (x86)\OANDA - MetaTrader\uninstall.exe (MetaQuotes Software Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\Silverlight.Configuration.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Microsoft Access Snapshot Viewer.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Microsoft Office Language Settings.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Uninstall Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\IObit Uninstaller.lnk -> C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe (IObit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Support Assistant.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (Hewlett-Packard Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Documentation.lnk -> C:\Program Files (x86)\Hewlett-Packard\Documentation\NotebookDocs.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helper Software\Backup.lnk -> C:\Program Files (x86)\Netsmart\Helper\Backup.exe (Netsmart Technologies)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helper Software\Data Integrity Check.lnk -> C:\Program Files (x86)\Netsmart\Helper\Hcheck.exe (Netsmart Technologies)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helper Software\Data Setup Utility.lnk -> C:\Program Files (x86)\Netsmart\Helper\HDataSetup.exe (Netsmart Technologies)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Helper Software\Helper.lnk -> C:\Program Files (x86)\Netsmart\Helper\Helper.exe (Netsmart Technologies)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture\FastStone Capture Help.lnk -> C:\Program Files (x86)\FastStone Capture\FSCaptureHelp.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture\FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture\Uninstall FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture\Visit www.FastStone.org.lnk -> C:\Program Files (x86)\FastStone Capture\Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\License.lnk -> C:\Program Files (x86)\Continuation\License.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\Readme.lnk -> C:\Program Files (x86)\Continuation\Readme.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\Uninstall.lnk -> C:\Program Files (x86)\Continuation\Uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\What's New.lnk -> C:\Program Files (x86)\Continuation\What's New.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat\Skype.lnk -> C:\Program Files (x86)\Online Services\Skype\SkypeLauncher.exe (Microsoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\IJ Scan Utility\IJ Scan Utility.lnk -> C:\Program Files (x86)\Canon\IJ Scan Utility\SCANUTILITY.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2015.lnk -> C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8\Uninstall Advanced SystemCare.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()
Shortcut: C:\ProgramData\Microsoft\Internet Explorer\Quick Launch\Spybot-S&D; Start Center.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe (Safer-Networking Ltd.)
Shortcut: C:\ProgramData\Microsoft\Internet Explorer\Quick Launch\System Scan.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe (Safer-Networking Ltd.)
Shortcut: C:\Users\DC 11-24-14\Links\Desktop (2).lnk -> C:\Users\DC 11-24-14\Downloads\Desktop.zip ()
Shortcut: C:\Users\DC 11-24-14\Links\Desktop.lnk -> C:\Users\DC 11-24-14\Desktop ()
Shortcut: C:\Users\DC 11-24-14\Links\Downloads (2).lnk -> C:\Users\DC 11-24-14\Downloads\Downloads.zip ()
Shortcut: C:\Users\DC 11-24-14\Links\Downloads.lnk -> C:\Users\DC 11-24-14\Downloads ()
Shortcut: C:\Users\DC 11-24-14\Links\Dropbox.lnk -> C:\Users\DC 11-24-14\Dropbox ()
Shortcut: C:\Users\DC 11-24-14\Links\OneDrive.lnk -> C:\Users\DC 11-24-14\OneDrive ()
Shortcut: C:\Users\DC 11-24-14\Desktop\Kindle.lnk -> C:\Users\DC 11-24-14\AppData\Local\Amazon\Kindle\application\Kindle.exe (Amazon.com)
Shortcut: C:\Users\DC 11-24-14\Desktop\Microsoft Excel.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\xlicons.exe ()
Shortcut: C:\Users\DC 11-24-14\Desktop\Microsoft Word.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\wordicon.exe ()
Shortcut: C:\Users\DC 11-24-14\Desktop\ScreenHunter 6.0 Free.lnk -> C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe (Wisdom Software Inc. )
Shortcut: C:\Users\DC 11-24-14\Desktop\Uniblue RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\RegistryBooster.exe (Uniblue Systems Limited)
Shortcut: C:\Users\DC 11-24-14\Desktop\Zoom.lnk -> C:\Users\DC 11-24-14\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\ScreenHunter 6.0 Free.lnk -> C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe (Wisdom Software Inc. )
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Start Zoom.lnk -> C:\Users\DC 11-24-14\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe (Dropbox, Inc.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon Kindle\Kindle.lnk -> C:\Users\DC 11-24-14\AppData\Local\Amazon\Kindle\application\Kindle.exe (Amazon.com)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon Kindle\Uninstall Kindle.lnk -> C:\Users\DC 11-24-14\AppData\Local\Amazon\Kindle\application\uninstall.exe (Amazon.com)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\SendTo\Dropbox.lnk -> C:\Users\DC 11-24-14\Dropbox ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Microsoft Access.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\accicons.exe ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Microsoft Excel.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\xlicons.exe ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Microsoft Outlook.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Microsoft PowerPoint.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\pptico.exe ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Microsoft Word.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\wordicon.exe ()
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe (Uniblue Systems Limited)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\Launcher.exe (Uniblue Systems Limited)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe (CyberLink Corp.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Uninstall Programs.lnk -> C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe (IObit)
Shortcut: C:\Users\Default\Links\OneDrive.lnk -> C:\Program Files (x86)\Microsoft OneDrive\OneDriveSetup.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk -> C:\Program Files (x86)\Microsoft OneDrive\OneDriveSetup.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Adobe Reader X.lnk -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
Shortcut: C:\Users\Public\Desktop\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.)
Shortcut: C:\Users\Public\Desktop\AVG 2015.lnk -> C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
Shortcut: C:\Users\Public\Desktop\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
Shortcut: C:\Users\Public\Desktop\FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Public\Desktop\Helper.lnk -> C:\Program Files (x86)\Netsmart\Helper\Helper.exe (Netsmart Technologies)
Shortcut: C:\Users\Public\Desktop\IObit Uninstaller.lnk -> C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe (IObit)
Shortcut: C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\OANDA - MetaTrader.lnk -> C:\Program Files (x86)\OANDA - MetaTrader\terminal.exe (MetaQuotes Software Corp.)
Shortcut: C:\Users\Public\Desktop\Quicken 2001 Basic.lnk -> C:\QUICKENW\QW.EXE (Intuit)
Shortcut: C:\Users\Public\Desktop\RegistryBooster.lnk -> C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe (Uniblue Systems Limited)
Shortcut: C:\Users\Public\Desktop\Smart Defrag 4.lnk -> C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe (IObit)
Shortcut: C:\Users\Public\Desktop\Spybot-S&D; Start Center.lnk -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe (Safer-Networking Ltd.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services\eBay.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=onlinesvs&s;=ebay&pf;=cnnb&locale;=en_us&bd;=all&c;=134
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\Snapfish.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\New Office Document.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -n
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Open Office Document.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -f
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Control Zone (Touchpad Clickpad Trackpad Mouse).lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "%programfiles%\Synaptics\SynTP\SynTPCpl.dll",ShowDevicePropPage 1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE (Microsoft Corporation) -> /OEM
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection\HP Recovery Manager\HP Recovery Media Creation.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\Rebecca.exe () -> \CRM
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken\Uninstall Quicken 2001 Basic.lnk -> C:\Windows\IsUninst.exe (InstallShield Software Corporation) -> -fC:\QUICKENW\Uninst.isu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\DTS Audio Control Panel.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> shell32.dll,Control_RunDLL RTSnMg64.cpl,,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Microsoft Office Shortcut Bar.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -o
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Uninstall IObit Uninstaller.lnk -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe () -> uninstall_start
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat\getonline.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Setup\NativeClient\hptcs.exe (Hewlett-Packard) -> MODE=GETONLINE URL=ReminderPage.html
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8\Advanced SystemCare 8.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /manual
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8\Protect.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /Protect
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8\Toolbox.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /toolbox
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8\Turbo Boost.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /turboboost
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\HP Setup\launchreg.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RunOnceHPTCS.exe () -> MODE=REGISTRATION URL=ReminderPage.html
ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\HP Setup\NativeClient\launchreg.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Setup\NativeClient\hptcs.exe (Hewlett-Packard) -> MODE=REGISTRATION
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\DC 11-24-14\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -extoff
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Appointment.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.Appointment
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Contact.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.Contact
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Journal Entry.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.Activity
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Message.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.Note
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Note.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.StickyNote
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Office Document.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -n
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\New Task.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\outicon.exe () -> /c IPM.Task
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Open Office Document.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -f
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Office\Shortcut Bar\Office\Screen Saver.lnk -> C:\Windows\Installer\{00010409-78E1-11D2-B60F-006097C998E7}\misc.exe () -> -s
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 8 (2).lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /manual
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 8.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /manual
ShortcutWithArgument: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Public\Desktop\Advanced SystemCare 8.lnk -> C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe (IObit) -> /manual
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4\Smart Defrag Home Page.url -> hxxp://www.iobit.com/iobitsmartdefrag.html
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\Contact Email.url -> mailto:Casey Stubbs <[removed]>
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Continuation\Winner's Edge Trading Website.url -> hxxp://winnersedgetrading.com
InternetURL: C:\Users\DC 11-24-14\Favorites\Cenlar Login.url -> https://www.loanadministration.com/loanadministration/ACCLogin.jsp
InternetURL: C:\Users\DC 11-24-14\Favorites\Email - Time Warner.url -> https://webmail.roadrunner.com/
InternetURL: C:\Users\DC 11-24-14\Favorites\MD On-Line.url -> https://wapp02.mdon-line.com/mdonline/home.asp
InternetURL: C:\Users\DC 11-24-14\Favorites\Settings - roadrunner.com.url -> hxxp://mail.twc.com/do/mail/settings
InternetURL: C:\Users\DC 11-24-14\Favorites\Smitty's Sanford.url -> hxxp://www.smittyscinema.com/showtimes-Sanford.asp
InternetURL: C:\Users\DC 11-24-14\Favorites\Links for United States\GobiernoUSA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129792
InternetURL: C:\Users\DC 11-24-14\Favorites\Links for United States\USA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129791
InternetURL: C:\Users\DC 11-24-14\Favorites\Links\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c;=142&bd;=pavilion&tp;=iefavbar&s;=amazon&pf;=cnnb&TYPE;=4
InternetURL: C:\Users\DC 11-24-14\Favorites\Links\Citizens Bank Online®.url -> https://www4.citizensbankonline.com/efs/servlet/efs/default.jsp
InternetURL: C:\Users\DC 11-24-14\Favorites\Links\HP Games.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&s;=myhpgames&tp;=iefavbar&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\Links\Suggested Sites.url -> https://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\DC 11-24-14\Favorites\Links\Web Slice Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=hpaccessories&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\eBay.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=ebay&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=activitycenter&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\HP Games.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=myhpgames&pf;=cnnb&locale;=en_US&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=hpstore&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=printing&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\Saving Center.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=savingscenter&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us
InternetURL: C:\Users\DC 11-24-14\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=downloads&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\DC 11-24-14\Favorites\golf\white mountain seniors.url -> hxxp://csigiharv6.wix.com/whitemountainseniors
InternetURL: C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox Website.URL -> hxxp://www.dropbox.com
InternetURL: C:\Users\Default\Favorites\Links\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c;=142&bd;=pavilion&tp;=iefavbar&s;=amazon&pf;=cnnb&TYPE;=4
InternetURL: C:\Users\Default\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=hpaccessories&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\eBay.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=ebay&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=activitycenter&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\HP Games.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=myhpgames&pf;=cnnb&locale;=en_US&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=hpstore&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=printing&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\Saving Center.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=savingscenter&pf;=cnnb&locale;=en_us&bd;=all&c;=134
InternetURL: C:\Users\Default\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us
InternetURL: C:\Users\Default\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp;=iefavs&s;=downloads&pf;=cnnb&locale;=en_us&bd;=all&c;=134
==================== End of log =============================
The FRST (addition) log is as follows:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-07-2015
Ran by [removed] at 2015-07-05 13:34:05
Running from F:\
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2195183980-3162753949-3626047813-500 - Administrator - Disabled)
DC 11-24-14 (S-1-5-21-2195183980-3162753949-3626047813-1002 - Administrator - Enabled) => C:\Users\DC 11-24-14
Guest (S-1-5-21-2195183980-3162753949-3626047813-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2195183980-3162753949-3626047813-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.22 (x64 edition) (HKLM\…\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 18 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 18.0.0.194 - Adobe Systems Incorporated)
Adobe Reader X (10.1.14) MUI (HKLM-x32\…\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.14 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\…\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.)
Advanced SystemCare 8 (HKLM-x32\…\Advanced SystemCare 8_is1) (Version: 8.3.0 - IObit)
Amazon Kindle (HKU\S-1-5-21-2195183980-3162753949-3626047813-1002\…\Amazon Kindle) (Version: - Amazon)
AMD Catalyst Install Manager (HKLM\…\{E0191C80-CD69-06F0-A0D1-D915579830C1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 10.2.2218 - AVAST Software)
AVG 2015 (HKLM\…\AVG) (Version: 2015.0.6037 - AVG Technologies)
AVG 2015 (Version: 15.0.4365 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.6037 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\…\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)
Canon IJ Scan Utility (HKLM-x32\…\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MX450 series MP Drivers (HKLM\…\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX450_series) (Version: 1.00 - Canon Inc.)
CCleaner (HKLM\…\CCleaner) (Version: 5.07 - Piriform)
Citrix Online Launcher (HKLM-x32\…\{C1D35D06-E60A-4834-9B52-F1F3E65D03C9}) (Version: 1.0.239 - Citrix)
Continuation (HKLM-x32\…\Continuation) (Version: - )
CyberLink LabelPrint (HKLM-x32\…\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\…\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.5.3228 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\…\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2.3302 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-2195183980-3162753949-3626047813-1002\…\Dropbox) (Version: 3.4.4 - Dropbox, Inc.)
Energy Star (HKLM-x32\…\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESU for Microsoft Windows 7 SP1 (HKLM-x32\…\{E1ACF120-CD69-47F0-B202-9A4B95C436D8}) (Version: 5.1.5 - Hewlett-Packard)
FastStone Capture 8.2 (HKLM-x32\…\FastStone Capture) (Version: 8.2 - FastStone Soft)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Helper 7.6.4 (HKLM-x32\…\Helper_is1) (Version: 7.6.4 - Netsmart Technologies)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\…\{D82B396E-A647-4C81-9DA4-C61F7BB620EC}) (Version: 1.1.0.0 - Hewlett-Packard)
HP On Screen Display (HKLM-x32\…\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\…\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\…\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15430.4033 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\…\{DB97D0DE-0AA1-413C-8398-92C7FA3F4A67}) (Version: 4.6.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\…\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\…\{44157EB3-D8D0-4BB1-B0F5-AD2C38814ED1}) (Version: 11.51.0027 - Hewlett-Packard Company)
IObit Uninstaller (HKLM-x32\…\IObitUninstall) (Version: 4.3.0.5 - IObit)
Java 8 Update 45 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\…\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office 2000 Professional (HKLM-x32\…\{00010409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2195183980-3162753949-3626047813-1002\…\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\…\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\…\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
OANDA - MetaTrader (HKLM-x32\…\OANDA - MetaTrader) (Version: 4.00 - MetaQuotes Software Corp.)
OEM Application Profile (HKLM-x32\…\{315F1A48-D883-B234-7C79-15873574ACC1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
Qualcomm Atheros Driver Installation Program (HKLM-x32\…\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Quicken 2001 Basic (HKLM-x32\…\Quicken 2001 Basic) (Version: - )
Realtek Card Reader (HKLM-x32\…\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29075 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\…\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7164 - Realtek Semiconductor Corp.)
RegistryBooster (HKLM-x32\…\{E55B3271-7CA8-4D0C-AE06-69A24856E997}_is1) (Version: 6.1.4.1 - Uniblue Systems Limited)
Skype™ 7.6 (HKLM-x32\…\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\…\Smart Defrag 4_is1) (Version: 4.1 - IObit)
Spybot - Search & Destroy (HKLM-x32\…\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Surfing Protection (HKLM-x32\…\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 18.0.4.0 - Synaptics Incorporated)
TurboTax 2013 (HKLM-x32\…\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
TurboTax 2014 (HKLM-x32\…\TurboTax 2014) (Version: 2014.0 - Intuit, Inc)
Uniblue RegistryBooster (HKLM-x32\…\Uniblue RegistryBooster) (Version: 6.0.10.7 - Uniblue Systems Ltd)
Visual Studio 2012 x64 Redistributables (HKLM\…\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Wisdom-soft ScreenHunter 6.0 Free (HKLM-x32\…\Wisdom-soft ScreenHunter 6.0 Free) (Version: - Wisdom Software Inc.)
Zoom (HKU\S-1-5-21-2195183980-3162753949-3626047813-1002\…\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2195183980-3162753949-3626047813-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DC 11-24-14\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
15-06-2015 11:14:49 Scheduled Checkpoint
16-06-2015 07:37:48 Windows Update
22-06-2015 09:54:19 Windows Update
01-07-2015 12:28:43 Scheduled Checkpoint
02-07-2015 13:03:07 Windows Modules Installer
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2015-01-18 08:39 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {14710884-766A-4CC8-9671-3E1EBF91AB79} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
Task: {16C9A212-B435-425F-8D86-C7278797E48D} - System32\Tasks\Uninstaller_SkipUac_DC_11-24-14 => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit)
Task: {34B0A12A-B1E1-4A44-BA3A-BCDCCC8251E2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: {35A77C8A-E44F-4F00-B86D-D90EBE9BEB0A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-24] (Adobe Systems Incorporated)
Task: {404B49D5-8E08-4084-A3F4-32684C86A7FA} - System32\Tasks\SmartDefrag4_Startup => C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe [2015-05-26] (IObit)
Task: {422752D8-D25A-496C-80EE-FBFF5497EFAA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {4731FDBC-8298-487D-9691-544EBB7853E6} - System32\Tasks\HPCeeScheduleForDC 11-24-14 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {4B1A0818-C4FD-4451-AE70-BE28AD4B3B73} - System32\Tasks\RegistryBooster Maintenance => C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe [2015-02-06] (Uniblue Systems Limited)
Task: {66B9AEE2-4451-411A-95AA-2B6FF28480C1} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)
Task: {69536E70-B8D3-4F0A-B761-29F4DE1E6449} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN31I9QJ93 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {7079874B-C86A-4912-A6E5-9D78E8D65951} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-24] (Google Inc.)
Task: {7BC546AD-6A09-403C-94CF-5570FF0C2ADA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {7C2708A4-11C6-4830-8672-BCA726D70928} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {809380BA-F651-4C91-B0A0-F9EF91F68FE7} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-06-10] (IObit)
Task: {82E04333-AC94-444A-8DBE-531983FA1E3C} - System32\Tasks\ASC8_SkipUac_DC 11-24-14 => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-06-16] (IObit)
Task: {89E223BE-472B-422F-8226-E7CD72F6E86A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)
Task: {8C0ACA3E-6EF8-4BC7-90BA-B2D19AC4E8EE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-24] (Google Inc.)
Task: {B1C50BBF-CD37-4C03-AE8A-0B55C9187815} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {BA92F87A-069A-4765-9531-F15267AB1DA9} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit)
Task: {BED3CE9F-075B-41B5-836F-2A5D967CEDCA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)
Task: {C6FFE598-9E6B-44B5-BA6C-0B435E8852C8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {DB23C124-C959-4019-8A91-94A92373E13F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {DB8D48F7-6586-401F-8104-AE9A295932D2} - System32\Tasks\RegistryBooster => C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe [2011-11-07] (Uniblue Systems Limited)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForDC 11-24-14.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\RegistryBooster Maintenance.job => C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe
Task: C:\Windows\Tasks\RegistryBooster.job => C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe
==================== Loaded Modules (Whitelisted) ==============
2015-03-04 12:16 - 2015-03-04 12:16 - 00620056 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2014-03-12 01:29 - 2014-03-12 01:29 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-03-04 12:17 - 2015-03-04 12:16 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe
2014-11-24 19:38 - 2015-03-04 12:16 - 03033112 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
2015-01-26 12:05 - 2014-07-11 16:04 - 01106720 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\RealTimeProtector.exe
2015-01-26 12:05 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2015-04-29 14:46 - 2015-04-29 14:46 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-29 14:46 - 2015-04-29 14:46 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-07-05 06:27 - 2015-07-05 06:27 - 02956288 _____ () C:\Program Files\AVAST Software\Avast\defs\15070500\algo.dll
2015-07-05 12:18 - 2015-07-05 12:18 - 02956288 _____ () C:\Program Files\AVAST Software\Avast\defs\15070501\algo.dll
2015-01-17 21:51 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-01-17 21:51 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-01-17 21:51 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-03-04 12:17 - 2015-03-04 12:16 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\log4cplusU.dll
2015-01-17 21:51 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-01-17 21:51 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-05-13 14:59 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Smart Defrag 4\webres.dll
2015-01-26 12:05 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-01-26 12:05 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-01-26 12:05 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2015-01-26 12:05 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\webres.dll
2014-10-11 08:36 - 2013-08-05 03:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 18:48 - 2013-08-05 18:48 - 00016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-03-26 14:57 - 2015-03-26 14:57 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-24 19:38 - 2015-03-04 12:16 - 40630296 _____ () C:\Program Files (x86)\AVG Web TuneUp\libcef.dll
2015-01-26 12:06 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2015-01-26 12:06 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2015-01-26 12:06 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\…\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\…\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\…\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\…\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\…\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\…\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\…\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\…\123simsen.com -> www.123simsen.com
There are 11404 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2195183980-3162753949-3626047813-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\DC 11-24-14\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: [removed] - [removed]
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Billminder.lnk => C:\Windows\pss\Billminder.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Quicken Startup.lnk => C:\Windows\pss\Quicken Startup.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^DC 11-24-14^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^eFax 4.4.lnk => C:\Windows\pss\eFax 4.4.lnk.Startup
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: eFax 4.4 =>
MSCONFIG\startupreg: HP Quick Launch => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
MSCONFIG\startupreg: HPOSD => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"
MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
MSCONFIG\startupreg: YouCam Service => "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F59C6171-2EDE-4AD8-BB23-62AA56CA6123}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{55165886-FB23-4F0B-A840-6481112E057B}] => (Allow) C:\Users\DC 11-24-14\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{E34449A8-F4A0-4B52-BE3C-EDA40BFCA3A0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{F7E93648-E382-472A-92FD-21928F6FFAF3}] => (Allow) LPort=2869
FirewallRules: [{2CD696EC-D2A2-458C-A5A8-05AD513029AC}] => (Allow) LPort=1900
FirewallRules: [{34B8162E-BA23-4D70-B7B9-D95FA84496C7}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{9870C047-375D-46D7-804D-65DE3CAAF9E7}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{0D39C297-78B7-4026-9AD4-321ED2C51D4B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0DF826B1-E4E5-4E00-827A-9F275BF19E61}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{CACF4294-1E52-4F9A-B580-0BCF290FD7A0}C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{2C307AF2-3898-4D87-B888-286AEF459FFF}C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{28C134F7-ED68-4325-B938-EB9D9B7D797E}C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{947F9EA6-9572-4B8C-8424-3161B13F3F0A}C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\dc 11-24-14\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{89A3C137-94DA-4C14-95D2-0CAC0F68F7AC}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe
FirewallRules: [{59110AA9-A042-4BBF-B534-5A299CA0B6C5}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{8189700A-A8CB-41EB-9BEA-325539E7A917}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{08B32920-08C3-4132-A1D6-F21D0C289B0B}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{67476A6F-4FFA-40D9-A8AA-E19DA7613510}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{EB95C732-8C65-4F12-BD92-A05BA7D701AE}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{EE40D826-87F8-4144-92CE-6A98CB422C15}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{39D9C280-82D9-43B8-8D71-5AED06485694}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{9975027D-73F0-4312-91D7-752CFF4A6567}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{2034606F-D243-479D-B5BB-9C64DB207AD2}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{4259186F-7300-4A8C-95CE-5B9A76FE2081}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{8E312852-1AE0-42DF-9D41-B195250F8537}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{919F6D36-BDF9-40E6-A635-03A952C8B878}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{F5B8734B-B977-4C2F-807F-7DDDD70B73FF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D; 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D; 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D; 2 Background update service
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/05/2015 00:18:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.17813, time stamp: 0x554a15f3
Faulting module name: ntdll.dll, version: 6.1.7601.18869, time stamp: 0x556366f2
Exception code: 0xc0000005
Fault offset: 0x000000000004ada4
Faulting process id: 0x56a4
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3
Error: (07/05/2015 08:05:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x4088
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 08:02:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x536c
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x4e88
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:58:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x4428
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:57:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x497c
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:54:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x48ec
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:51:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x45ec
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:47:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x38bc
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
Error: (07/05/2015 07:45:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00001000
Faulting process id: 0x4198
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3
System errors:
=============
Error: (07/05/2015 00:23:28 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: The AVGIDSAgent service depends the following service: AVGIDSDriver. This service might not be installed.
Error: (07/05/2015 06:30:19 AM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: The AVGIDSAgent service depends the following service: AVGIDSDriver. This service might not be installed.
Error: (07/04/2015 08:45:05 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {0002DF01-0000-0000-C000-000000000046}
Error: (07/04/2015 08:44:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Support Assistant Service service failed to start due to the following error:
%%1053
Error: (07/04/2015 08:44:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the HP Support Assistant Service service to connect.
Error: (07/04/2015 08:43:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (07/04/2015 08:41:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Spybot-S&D; 2 Scanner Service service failed to start due to the following error:
%%1053
Error: (07/04/2015 08:41:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D; 2 Scanner Service service to connect.
Error: (07/04/2015 08:40:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The mrtRate service failed to start due to the following error:
%%1275
Error: (07/04/2015 08:40:57 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\mrtRate.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
Microsoft Office:
=========================
Error: (07/05/2015 00:18:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GWXUX.exe6.3.9600.17813554a15f3ntdll.dll6.1.7601.18869556366f2c0000005000000000004ada456a401d0b73e2c5ab0fbC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dll6ebc80ca-2331-11e5-b580-3863bb70341d
Error: (07/05/2015 08:05:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c000000500001000408801d0b71ae08d68d1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknown1e87af4d-230e-11e5-b580-3863bb70341d
Error: (07/05/2015 08:02:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c000000500001000536c01d0b71a71c8fd7dC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknownafad4aa7-230d-11e5-b580-3863bb70341d
Error: (07/05/2015 07:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c0000005000010004e8801d0b71a03002548C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknown40c88599-230d-11e5-b580-3863bb70341d
Error: (07/05/2015 07:58:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c000000500001000442801d0b719dc1e6bb9C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknown19e3bebe-230d-11e5-b580-3863bb70341d
Error: (07/05/2015 07:57:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c000000500001000497c01d0b719b53b79a5C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknownf35137c8-230c-11e5-b580-3863bb70341d
Error: (07/05/2015 07:54:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c00000050000100048ec01d0b7196a628735C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknowna83f0c12-230c-11e5-b580-3863bb70341d
Error: (07/05/2015 07:51:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c00000050000100045ec01d0b718fb9716e6C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknown39f354f2-230c-11e5-b580-3863bb70341d
Error: (07/05/2015 07:47:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c00000050000100038bc01d0b71868f3b5fcC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknowna6b58685-230b-11e5-b580-3863bb70341d
Error: (07/05/2015 07:45:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE11.0.9600.17840555fe1bbunknown0.0.0.000000000c000000500001000419801d0b7181e3502afC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEunknown5bf91d30-230b-11e5-b580-3863bb70341d
==================== Memory info ===========================
Processor: AMD A6-6310 APU with AMD Radeon R4 Graphics
Percentage of memory in use: 31%
Total physical RAM: 7129.08 MB
Available physical RAM: 4892.97 MB
Total Virtual: 14256.37 MB
Available Virtual: 11316.51 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:674.3 GB) (Free:611.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:24.04 GB) (Free:2.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (EMTEC) (Removable) (Total:29.87 GB) (Free:29.84 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: FECF4D56)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=674.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=24 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=102 MB) - (Type=0C)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 29.9 GB) (Disk ID: 1C2D5198)
Partition 1: (Not Active) - (Size=29.9 GB) - (Type=0C)
==================== End of log ============================
