What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

CPU at 100% degrading all performance

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1

Hi: Thanks for being there to help.

1. Dell Latitutde Win 7 Pro SP1

2. Computer is extremely slow. CPU usage is constantly at 100%

3. Tried a clean boot with only MS services running - no change.

4. Rebooted in safe mode - speed was significantly better.

5. Rebooted normally - CPU at 100% again.

6. Attempted restore point. Received error that it failed while copying the registry from the restore point. An unspecified error occurred during System Restore (0x80070570).

7. Attempted again with same restore point - same error.8. Tried with earlier restore point - same error.

8. Additional notes. The last change that I made to my computer before this started was to upgrade my subscription to Carbonite (on line backup) to add external drives. But shut down after that addition and re started once without a problem. Also, since the problem started, each time the computer re-starts, we receive the following error "Evernote - Could not add tray icon, error: An attempt was made to reference a token that does not exist."  Also at some point I saw a message about a DSD_5984 error.

 

8. Ran aswMBR & FRST to produce  the following logs.

 

Thank you so much for your help..  Harold

 

aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-10-03 17:25:38
—————————–
17:25:41.467    OS Version: Windows 6.1.7601 Service Pack 1
17:25:41.467    Number of processors: 2 586 0x170A
17:25:41.654    ComputerName: MARCIA-PC  UserName: Marcia
17:33:11.389    Initialize success
17:33:27.737    VM: initialized successfully
17:33:36.583    VM: Intel CPU BiosDisabled
17:57:24.968    AVAST engine defs: 15100301
18:09:22.928    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
18:09:23.146    Disk 0 Vendor: ST925041 0004 Size: 238475MB BusType: 8
18:09:24.223    Disk 0 MBR read successfully
18:09:24.457    Disk 0 MBR scan
18:09:29.808    Disk 0 Windows 7 default MBR code
18:09:29.932    Disk 0 Partition 1 00     DE Dell Utility Dell 8.0      211 MB offset 63
18:09:31.758    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS          750 MB offset 434176
18:09:32.007    Disk 0 default boot code
18:09:34.893    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       237512 MB offset 1970176
18:09:37.374    Disk 0 scanning sectors +488394752
18:09:39.261    Disk 0 scanning C:\Windows\system32\drivers
18:17:21.521    Service scanning
18:22:12.976    Service MpKsl1e0b1131 c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E0B0CE7D-1583-4185-AF6C-A7852EFFEB3E}\MpKsl1e0b1131.sys **LOCKED** 32
18:29:24.348    Modules scanning
18:29:24.598    Disk 0 trace - called modules:
18:29:24.770   
18:29:30.526    AVAST engine scan C:\Windows
18:30:17.186    AVAST engine scan C:\Windows\system32
19:58:02.398    AVAST engine scan C:\Windows\system32\drivers
20:05:38.704    AVAST engine scan C:\Users\Marcia
07:19:06.832    AVAST engine scan C:\ProgramData
07:42:10.882    Disk 0 statistics 5051767/0/0 @ 0.08 MB/s
07:42:11.100    Scan finished successfully
09:04:41.489    Disk 0 MBR has been saved successfully to "C:\Users\Marcia\Desktop\hg\MBR.dat"
09:04:41.973    The log file has been saved successfully to "C:\Users\Marcia\Desktop\hg\aswMBR.txt"

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:04-10-2015
Ran by [removed] (administrator) on MARCIA-PC (04-10-2015 09:27:43)
Running from C:\Users\[removed]\Downloads
[removed] Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files\EaseUS\TrayPopup\TrayTipAgent.exe
(Greenshot) C:\Program Files\Greenshot_ScreenShot\Greenshot.exe
(Sanford, L.P.) C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe
(Spotify Ltd) C:\Users\Marcia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Dell Inc.) C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe
(Intuit Inc.) C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(Dropbox, Inc.) C:\Users\Marcia\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(AVAST Software) C:\Users\Marcia\Downloads\aswMBR.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [] => [X]
HKLM\…\Run: [EaseUS TB Tray Agent] => C:\Program Files\EaseUS\TrayPopup\TrayTipAgent.exe [253992 2014-12-15] ()
HKLM\…\Run: [Greenshot] => C:\Program Files\Greenshot_ScreenShot\Greenshot.exe [462848 2012-10-30] (Greenshot)
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157968 2015-08-13] (Apple Inc.)
HKLM\…\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM\…\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAC0ATgAwADAAVwBDAC0AMABEADAARgBTAC0AUQBEAFcATQBSAC0AMgBKAEYATgBNAC0AQgA2ADMARQBWAA"&"inst=NwA2AC0AOQAxADYANAAwADkANwA (the data entry has 259 more characters).
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [Google Update] => C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc.)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [MobileDocuments] => C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [DymoQuickPrint] => C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe [1865840 2012-10-09] (Sanford, L.P.)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [Spotify Web Helper] => C:\Users\Marcia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-02-19] (Spotify Ltd)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Run: [Dropbox Update] => C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess?
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\InprocServer32: [Default-pngfilt]  <==== ATTENTION

HKU\S-1-5-18\…\RunOnce: [iCloud] => C:\Program Files\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
AppInit_DLLs: AVGRSSTX.DLL => No File
AppInit_DLLs:  C:\PROGRA~1\GOOGLE\GOOGLE~1\GO36F4~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-07-06] (Google)
Lsa: [Authentication Packages] msv1_0 wvauth
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll [2009-06-11] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll [2009-06-11] (Wave Systems Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2015-08-16]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell ControlPoint System Manager.lnk [2009-12-28]
ShortcutTarget: Dell ControlPoint System Manager.lnk -> C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe (Dell Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2014-03-12]
ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2014-03-12]
ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2014-03-12]
ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files\Intuit\QuickBooks 2014\QBW32.EXE (Intuit Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Status Monitor.lnk [2015-10-01]
ShortcutTarget: Status Monitor.lnk -> C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
Startup: C:\Users\Marcia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Marcia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2012-08-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Marcia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk [2012-11-17]
ShortcutTarget: EvernoteTray.lnk -> C:\Program Files\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{9A82F16E-7C56-4D13-B2D0-7D7965EB754C}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{D17ED9BB-AE2A-4763-BA89-3B99CC583D60}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/USREL/1
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
SearchScopes: HKLM -> {DBA39C0B-2491-414F-8FEA-9687A481D756} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=DLRDF8&pc;=MDDR&src;=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s;=ABnxyXNc1dsR9H_YlZYmszWPYPs?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {9E915BD4-C731-4F0E-B55D-A8479AF7B0FC} URL = hxxp://search.avg.com/route/?d=4b4c042d&v;=6.10.6.4&i;=26&tp;=chrome&q;={searchTerms}&lng;={language}&iy;=&ychte;=us
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {DBA39C0B-2491-414F-8FEA-9687A481D756} URL =
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {EDA12BE7-A010-49A2-9367-9976EABF5172} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei;=utf-8&type;=971163&p;={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-06-23] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files\Evernote\Evernote\EvernoteIE.dll [2013-03-02] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-06-23] (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
Handler: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll [2014-12-10] (Intuit, Inc.)
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default
FF DefaultSearchEngine.US: Google
FF Homepage: hxxps://mail.google.com/mail/u/0/?pli=1#inbox
FF Keyword.URL: hxxp://search.avg.com/route/?d=4b4c042d&v;=7.007.026.001&i;=26&tp;=ab&iy;=&ychte;=us&lng;=en-US&q;=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-21] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin: @dymo.com/DymoLabelFramework -> C:\Program Files\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2012-10-09] ( Sanford L.P.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\system32\npdeployJava1.dll [2012-06-23] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-06-23] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @Musicnotes.com/Musicnotes Viewer -> C:\Program Files\Musicnotes\npmusicn.dll [2011-03-19] (Musicnotes, Inc.)
FF Plugin: @Sibelius.com/Scorch Plugin -> C:\Program Files\Musicnotes\npsibelius.dll [2010-04-08] ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-02] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2950318581-11869349-2311908374-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Marcia\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-06-10] (Citrix Online)
FF Plugin HKU\S-1-5-21-2950318581-11869349-2311908374-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Marcia\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2950318581-11869349-2311908374-1001: @talk.google.com/O1DPlugin -> C:\Users\Marcia\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2950318581-11869349-2311908374-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-2950318581-11869349-2311908374-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-07-02] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-09-10] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-09-10] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-09-10] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-09-10] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-09-10] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marcia\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Marcia\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: LogMeIn, Inc. Remote Access Plugin - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\[removed] [2014-11-03]
FF Extension: NetVideoHunter - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\[removed] [2015-05-28]
FF Extension: LastPass - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\[removed] [2015-09-25]
FF Extension: WOT - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-09]
FF Extension: Adobe DLM (powered by getPlus(R)) - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7} [2009-03-03]
FF Extension: Clearly - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\[removed] [2012-08-12]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-02-03]
FF Extension: Video DownloadHelper - C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Profiles\r4mp8c96.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-10-02]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-10-02]

Chrome:
=======
CHR Profile: C:\Users\Marcia\AppData\Local\Google\Chrome\User Data\Default
StartMenuInternet: Google Chrome - C:\Users\Marcia\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 buttonsvc32; C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe [293968 2009-04-27] (Dell Inc.) [File not signed]
S4 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [812392 2009-06-26] (Broadcom Corporation)
S4 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [26984 2009-06-26] (Broadcom Corporation)
S4 dcpsysmgrsvc; c:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe [382752 2009-07-16] (Dell Inc.)
S4 DymoPnpService; C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe [32368 2012-10-09] (Sanford, L.P.)
S4 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [37416 2014-12-15] (CHENGDU YIWO Tech Development Co., Ltd)
S4 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-06] (Google)
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
S4 Peachtree SmartPosting 2011; C:\Program Files\Peachtree2011\SmartPostingService2011.exe [43848 2011-10-25] (Sage Software, Inc.)
S4 psqlWGE; C:\Program Files\Pervasive Software\PSQL\bin\w3dbsmgr.exe [435496 2010-04-10] (Pervasive Software Inc.)
S4 QBCFMonitorService; C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2014-12-10] (Intuit) [File not signed]
S4 QBFCService; C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2013-10-10] (Intuit Inc.) [File not signed]
S4 QBVSS; C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2013-10-10] (Intuit Inc.) [File not signed]
S4 SecureStorageService; C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe [1019904 2009-06-03] (Wave Systems Corp.) [File not signed]
S4 SMManager; C:\Program Files\Dell\Dell ControlPoint\Connection Manager\SMManager.exe [76288 2009-10-05] (Smith Micro Software, Inc.) [File not signed]
S4 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_450b431403c091e3\STacSV.exe [221266 2009-07-31] (IDT, Inc.)
S4 tcsd_win32.exe; C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1273856 2008-11-12] () [File not signed]
S4 TdmService; C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe [1622016 2009-06-11] (Wave Systems Corp.) [File not signed]
S4 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-06] (TeamViewer GmbH)
S4 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
S2 GoToMyPC; "C:\Program Files\Citrix\GoToMyPC\g2svc.exe" Start=service [X]
S4 LMIGuardianSvc; "C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 acpials; C:\Windows\System32\DRIVERS\acpials.sys [7680 2009-07-13] (Microsoft Corporation)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [33832 2009-06-26] (Broadcom Corporation)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51752 2014-12-15] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41512 2014-12-15] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15912 2014-12-15] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [189992 2014-12-15] (CHENGDU YIWO Tech Development Co., Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKsl1e0b1131; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E0B0CE7D-1583-4185-AF6C-A7852EFFEB3E}\MpKsl1e0b1131.sys [39168 2015-10-03] (Microsoft Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [21520 2010-07-21] (Microsoft Corporation)
R3 OA001Ufd; C:\Windows\System32\DRIVERS\OA001Ufd.sys [144672 2008-06-03] (Creative Technology Ltd.)
R3 OA001Vid; C:\Windows\System32\DRIVERS\OA001Vid.sys [277440 2008-09-18] (Creative Technology Ltd.)
R0 PBADRV; C:\Windows\System32\DRIVERS\PBADRV.sys [26608 2008-06-04] (Dell Inc)
S3 risdpcie; C:\Windows\system32\DRIVERS\risdpe86.sys [49152 2009-06-30] (REDC)
S3 rixdpcie; C:\Windows\system32\DRIVERS\rixdpe86.sys [38400 2009-07-04] (REDC)
R2 WavxDMgr; C:\Windows\System32\DRIVERS\WavxDMgr.sys [200192 2009-07-27] (Wave Systems Corp.) [File not signed]
S2 cis1284; \??\C:\Windows\system32\drivers\cis1284.sys [X]
S2 LMIInfo; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [X]
S4 LMIRfsClientNP; no ImagePath
S3 NvtSp50; System32\Drivers\NvtSp50.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
U3 aswMBR; \??\C:\Users\Marcia\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\Marcia\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-04 09:27 - 2015-10-04 09:37 - 00025443 _____ C:\Users\Marcia\Downloads\FRST.txt
2015-10-04 09:25 - 2015-10-04 09:30 - 00000000 ____D C:\FRST
2015-10-04 09:25 - 2015-10-04 09:25 - 01697792 _____ (Farbar) C:\Users\Marcia\Downloads\FRST.exe
2015-10-03 16:47 - 2015-10-03 16:47 - 00000000 _____ C:\Users\Public\Desktop\Carbonite Setup.log
2015-10-03 14:49 - 2015-10-03 15:14 - 05198336 _____ (AVAST Software) C:\Users\Marcia\Downloads\aswMBR.exe
2015-10-03 12:10 - 2015-10-03 12:10 - 00000000 ____D C:\Users\Marcia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-02 22:20 - 2015-10-03 13:20 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-10-01 19:32 - 2015-10-01 19:32 - 00000000 ____D C:\7a35395bef4ef4db9a4ceb
2015-10-01 18:23 - 2015-10-01 18:23 - 00000000 ____D C:\35fdc4a4337e8c75cedc4e088d94
2015-10-01 12:21 - 2015-10-01 12:22 - 00008295 _____ C:\Users\Marcia\Downloads\report(111).txt
2015-10-01 12:21 - 2015-10-01 12:21 - 00030220 _____ C:\Users\Marcia\Downloads\report(110).txt
2015-10-01 11:10 - 2015-10-01 11:10 - 00899785 _____ C:\Users\Marcia\Downloads\rearzareservation1745317093gordonmyrnaadat.zip
2015-09-28 11:06 - 2015-09-28 11:06 - 00030220 _____ C:\Users\Marcia\Downloads\report(109).txt
2015-09-24 13:17 - 2015-09-24 13:17 - 00027426 _____ C:\Users\Marcia\Downloads\report(108).txt
2015-09-21 14:17 - 2015-09-21 14:17 - 00020930 _____ C:\Users\Marcia\Downloads\report(107).txt
2015-09-16 15:34 - 2015-09-16 15:34 - 00027490 _____ C:\Users\Marcia\Downloads\report(106).txt
2015-09-16 15:29 - 2015-09-16 15:29 - 00012444 _____ C:\Users\Marcia\Downloads\report(105).txt
2015-09-10 14:13 - 2015-09-10 14:13 - 00001817 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-09-10 14:13 - 2015-09-10 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-09-10 14:12 - 2015-09-10 14:13 - 00000000 ____D C:\Program Files\QuickTime
2015-09-10 14:10 - 2015-09-10 14:10 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-09-10 14:10 - 2015-09-10 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-09-10 14:07 - 2015-09-10 14:10 - 00000000 ____D C:\Program Files\iTunes
2015-09-10 14:07 - 2015-09-10 14:07 - 00000000 ____D C:\Program Files\iPod
2015-09-09 15:18 - 2015-09-09 15:18 - 00022021 _____ C:\Users\Marcia\Downloads\report(104).txt
2015-09-08 12:25 - 2015-08-27 10:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-08 12:25 - 2015-08-27 10:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-08 12:25 - 2015-08-27 10:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-08 12:25 - 2015-08-27 10:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-08 12:25 - 2015-08-05 10:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-08 12:25 - 2015-08-05 10:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-08 12:25 - 2015-08-05 10:40 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-08 12:24 - 2015-09-01 19:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-08 12:24 - 2015-09-01 19:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-08 12:24 - 2015-09-01 19:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-08 12:24 - 2015-09-01 19:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-08 12:24 - 2015-09-01 18:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-08 12:24 - 2015-09-01 18:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-08 12:24 - 2015-08-17 18:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-08 12:24 - 2015-08-14 23:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-08 12:24 - 2015-08-14 22:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-08 12:24 - 2015-08-14 22:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-08 12:24 - 2015-08-14 22:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-08 12:24 - 2015-08-14 22:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-08 12:24 - 2015-08-14 22:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-08 12:24 - 2015-08-14 22:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-08 12:24 - 2015-08-14 22:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-08 12:24 - 2015-08-14 22:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-08 12:24 - 2015-08-14 22:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-08 12:24 - 2015-08-14 22:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-08 12:24 - 2015-08-14 22:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-08 12:24 - 2015-08-14 22:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-08 12:24 - 2015-08-14 22:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-08 12:24 - 2015-08-14 22:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-08 12:24 - 2015-08-14 22:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-08 12:24 - 2015-08-14 22:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-08 12:24 - 2015-08-14 22:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-08 12:24 - 2015-08-14 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-08 12:24 - 2015-08-14 22:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-08 12:24 - 2015-08-14 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-08 12:24 - 2015-08-14 22:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-08 12:24 - 2015-08-14 22:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-08 12:24 - 2015-08-14 22:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-08 12:24 - 2015-08-14 22:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-08 12:24 - 2015-08-14 22:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-08 12:24 - 2015-08-14 22:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-08 12:24 - 2015-08-14 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-08 12:24 - 2015-08-14 21:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-08 12:24 - 2015-08-14 21:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-08 12:24 - 2015-08-14 21:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-08 12:24 - 2015-08-04 10:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-08 12:24 - 2015-08-04 10:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-08 12:24 - 2015-08-04 10:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-08 12:24 - 2015-08-04 10:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-08 12:24 - 2015-08-04 10:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-08 12:24 - 2015-08-04 09:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-08 12:24 - 2015-07-22 10:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-09-08 12:24 - 2015-07-22 10:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-08 12:24 - 2015-07-22 10:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-08 12:24 - 2015-07-22 10:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-08 12:24 - 2015-07-22 10:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-08 12:24 - 2015-07-22 10:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-08 12:24 - 2015-07-22 10:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-08 12:24 - 2015-07-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-08 12:24 - 2015-07-22 10:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-08 12:24 - 2015-07-22 10:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-08 12:24 - 2015-07-22 10:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-08 12:24 - 2015-07-22 10:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-08 12:24 - 2015-07-22 10:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-08 12:24 - 2015-07-22 10:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-08 12:24 - 2015-07-22 09:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-08 12:24 - 2015-07-22 09:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-08 12:24 - 2015-07-22 09:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-08 12:24 - 2015-07-22 09:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-08 12:24 - 2015-07-09 10:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-08 12:24 - 2015-07-09 10:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-08 12:23 - 2015-08-26 10:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-08 12:23 - 2015-08-26 10:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-08 12:23 - 2015-08-26 10:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-08 12:23 - 2015-08-26 10:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-08 12:23 - 2015-08-26 10:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-08 12:23 - 2015-07-14 19:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-08 12:23 - 2015-06-25 02:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-08 12:23 - 2015-06-25 02:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-08 12:23 - 2015-06-25 02:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-04 09:15 - 2012-08-25 18:49 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-04 09:10 - 2010-01-06 19:57 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA.job
2015-10-04 09:04 - 2008-03-31 20:00 - 00000000 ____D C:\Users\Marcia\Desktop\hg
2015-10-04 09:01 - 2015-06-18 11:50 - 00000922 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA.job
2015-10-04 06:45 - 2009-07-13 21:55 - 01137749 _____ C:\Windows\WindowsUpdate.log
2015-10-04 00:46 - 2009-07-13 21:34 - 00025424 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-04 00:46 - 2009-07-13 21:34 - 00025424 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-03 17:30 - 2012-03-10 20:47 - 00000000 ___RD C:\Users\Marcia\Dropbox
2015-10-03 17:29 - 2012-03-10 20:44 - 00000000 ____D C:\Users\Marcia\AppData\Roaming\Dropbox
2015-10-03 17:26 - 2013-03-11 23:06 - 01391104 ___SH C:\Users\Marcia\Downloads\Thumbs.db
2015-10-03 16:55 - 2009-07-13 21:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-03 16:54 - 2009-07-13 21:39 - 00159589 _____ C:\Windows\setupact.log
2015-10-03 16:49 - 2012-04-26 08:34 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-10-03 16:49 - 2009-12-29 01:18 - 00189350 _____ C:\Windows\PFRO.log
2015-10-03 16:41 - 2014-08-20 11:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carbonite
2015-10-03 16:30 - 2015-05-28 18:15 - 00030208 _____ C:\Users\Marcia\Desktop\home stuff.xls
2015-10-03 16:11 - 2010-01-06 19:57 - 00000860 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core.job
2015-10-03 15:44 - 2009-12-28 23:32 - 00788454 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-03 15:43 - 2011-11-30 12:22 - 00036352 _____ C:\Users\Marcia\Documents\aaa-help.xls
2015-10-03 14:00 - 2015-06-18 11:50 - 00000870 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core.job
2015-10-03 11:11 - 2010-01-06 09:57 - 00000000 ____D C:\Users\Marcia\Documents\Quickbooks Data
2015-10-01 18:29 - 2007-04-18 18:33 - 04418560 ___SH C:\Users\Marcia\Desktop\Thumbs.db
2015-10-01 18:28 - 2015-06-11 11:59 - 00000000 ____D C:\Users\Marcia\Desktop\fabric
2015-10-01 12:31 - 2012-01-04 12:02 - 00000000 ____D C:\MOMLocal8
2015-10-01 12:20 - 2015-06-27 15:24 - 00000000 ____D C:\Users\Marcia\AppData\LocalLow\LastPass
2015-10-01 12:11 - 2005-12-27 11:48 - 00000000 ____D C:\Users\Marcia\Documents\a-NW TAXES
2015-09-28 20:20 - 2015-08-11 21:06 - 00000000 ____D C:\Users\Marcia\AppData\Roaming\TeamViewer
2015-09-28 17:00 - 2014-01-27 12:19 - 00000000 ____D C:\Users\Marcia\Desktop\PDFCreatorSpool
2015-09-28 12:17 - 2005-11-18 22:36 - 00000000 ____D C:\Users\Marcia\Documents\a-Nature Watch
2015-09-26 09:06 - 2015-05-18 11:19 - 00000000 ____D C:\Users\Marcia\AppData\Local\Greenshot
2015-09-26 07:20 - 2008-01-13 17:31 - 00000000 ____D C:\Users\Marcia\AppData\Roaming\Skype
2015-09-21 11:15 - 2012-06-23 13:30 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-09-21 11:15 - 2012-06-23 13:30 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-09-20 21:39 - 2013-09-01 08:18 - 00000000 ____D C:\Users\Marcia\Documents\Temple
2015-09-14 21:55 - 2010-01-05 22:08 - 00000000 ____D C:\Users\Marcia\Documents\Outlook Data
2015-09-10 14:07 - 2010-01-06 13:07 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-09-09 15:20 - 2010-02-15 21:12 - 00000468 _____ C:\Windows\BRWMARK.INI
2015-09-08 20:17 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\rescache
2015-09-08 17:44 - 2009-07-13 21:33 - 00434728 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-08 17:39 - 2009-07-14 00:50 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-08 17:23 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-09-08 17:16 - 2013-08-14 09:39 - 00000000 ____D C:\Windows\system32\MRT
2015-09-07 20:16 - 2014-12-28 15:15 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Files in the root of some directories =======

2013-02-18 20:16 - 2013-02-18 20:18 - 0037386 __RSH () C:\Program Files\DLS8Uninstall.log
2012-12-29 13:01 - 2012-12-29 13:01 - 0038440 _____ () C:\Users\Marcia\AppData\Roaming\Microsoft Excel.ADR
2014-04-10 12:33 - 2015-09-03 13:07 - 0003445 _____ () C:\Users\Marcia\AppData\Roaming\QBFileDrTool.log
2014-12-23 09:27 - 2014-12-23 09:27 - 0004096 ____H () C:\Users\Marcia\AppData\Local\keyfile3.drm
2010-11-28 12:38 - 2010-11-28 12:38 - 0007609 _____ () C:\Users\Marcia\AppData\Local\Resmon.ResmonCfg
2010-01-05 20:42 - 2012-02-01 21:30 - 0000000 _____ () C:\Users\Marcia\AppData\Local\WavXMapDrive.bat

Some files in TEMP:
====================
C:\Users\Marcia\AppData\Local\Temp\Abspdf.exe
C:\Users\Marcia\AppData\Local\Temp\acfpdfu.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuamd64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfui.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuia64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuiamd64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuiia64.dll
C:\Users\Marcia\AppData\Local\Temp\cdintf.dll
C:\Users\Marcia\AppData\Local\Temp\CSIF155.exe
C:\Users\Marcia\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpo9zdz2.dll
C:\Users\Marcia\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Marcia\AppData\Local\Temp\installutilities.dll
C:\Users\Marcia\AppData\Local\Temp\IPx86_1033.exe
C:\Users\Marcia\AppData\Local\Temp\ITPx86_1033.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u20-windows-i586-iftw-rv.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Marcia\AppData\Local\Temp\MSIZAP.EXE
C:\Users\Marcia\AppData\Local\Temp\PDFPRT400.exe
C:\Users\Marcia\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Marcia\AppData\Local\Temp\stlport_r50.dll
C:\Users\Marcia\AppData\Local\Temp\uninstall.exe
C:\Users\Marcia\AppData\Local\Temp\vn9mda7z.dll
C:\Users\Marcia\AppData\Local\Temp\xmllite.dll
C:\Users\Marcia\AppData\Local\Temp\_isADEB.exe
C:\Users\Test\AppData\Local\Temp\Intuit.Spc.Map.EntitlementClient.Install.dll
C:\Users\Test\AppData\Local\Temp\MSIZAP.EXE
C:\Users\Test\AppData\Local\Temp\qbinstal.dll
C:\Users\Test\AppData\Local\Temp\stlport_r50.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-01 00:54

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:04-10-2015
Ran by [removed] (2015-10-04 09:51:39)
Running from C:\Users\[removed]\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) (2010-01-06 03:41:26)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2950318581-11869349-2311908374-500 - Administrator - Disabled)
Guest (S-1-5-21-2950318581-11869349-2311908374-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2950318581-11869349-2311908374-1003 - Limited - Enabled)
Marcia (S-1-5-21-2950318581-11869349-2311908374-1001 - Administrator - Enabled) => C:\Users\Marcia
Test (S-1-5-21-2950318581-11869349-2311908374-1004 - Administrator - Enabled) => C:\Users\Test

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Disabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Disabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM\…\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM\…\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Photoshop Elements 2.0 (HKLM\…\Adobe Photoshop Elements 2.0) (Version: 2.0 - Adobe Systems, Inc.)
All Day Battery Life Configuration (HKLM\…\{2220CF3A-EBD6-4070-94D0-0C7337B537A7}) (Version: 1.1.0 - Dell Inc.)
AnswerWorks 5.0 English Runtime (HKLM\…\{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}) (Version: 5.0.7 - Vantage Software Technologies)
Apple Application Support (32-bit) (HKLM\…\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\…\{538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM\…\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}) (Version: 2.1.3.127 - Apple Inc.)
Bing Bar (HKLM\…\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
BioAPI Framework (Version: 1.0.1 - Dell Inc.) Hidden
Bonjour (HKLM\…\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-7340 (HKLM\…\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
Brother MFL-Pro Suite MFC-9840CDW (HKLM\…\{C83FB11D-9EC6-49D7-99A7-DDDB2264883C}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
Canon Easy-WebPrint EX (HKLM\…\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Tool (HKLM\…\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJWCS - Common Profile Extention Data (HKLM\…\IJWCS - Common Profile Extention Data) (Version: 1.0.0 - Canon Inc.)
Canon IJWCS - PRO-1 series Extention Data (HKLM\…\IJWCS - PRO-1 series Extention Data) (Version: 1.0.0 - Canon Inc.)
Canon IJWCS - PRO-10 series Extention Data (HKLM\…\IJWCS - PRO-10 series Extention Data) (Version: 1.0.0 - Canon Inc.)
Canon IJWCS - PRO-100 series Extention Data (HKLM\…\IJWCS - PRO-100 series Extention Data) (Version: 1.0.0 - Canon Inc.)
Canon My Image Garden (HKLM\…\Canon My Image Garden) (Version: 1.0.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM\…\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
Canon My Printer (HKLM\…\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Print Studio Pro (HKLM\…\Print Studio Pro) (Version: 1.0.0 - Canon Inc.)
Canon PRO-100 series On-screen Manual (HKLM\…\Canon PRO-100 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon PRO-100 series Printer Driver (HKLM\…\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_PRO-100_series) (Version:  - Canon Inc.)
Canon PRO-100 series User Registration (HKLM\…\Canon PRO-100 series User Registration) (Version:  - Canon Inc.‎)
Canon Quick Menu (HKLM\…\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
Citrix Online Launcher (HKLM\…\{6740FE60-43C1-4D15-8C4A-001624134B14}) (Version: 1.0.312 - Citrix)
Compatibility Pack for the 2007 Office system (HKLM\…\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Crystal Reports 2008 Runtime SP1 (HKLM\…\{C484CC8D-03CF-4022-89C4-DB4F02E8A15B}) (Version: 12.1.0.882 - Business Objects)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DCP32MMWrapper (Version: 1.6.334.60 - Broadcom Corporation) Hidden
Dell Control Point (Version: 1.6.334.60 - Broadcom Corporation) Hidden
Dell ControlPoint Connection Manager (HKLM\…\{E63A7E64-AD93-47E7-AC5C-BA042AA740CA}) (Version: 1.3.1 - Dell Inc.)
Dell ControlPoint Security Manager (HKLM\…\{F4487649-7368-4217-AEA3-1E04DB3E2C5C}) (Version: 1.6.334.60 - Dell Inc.)
Dell ControlPoint System Manager (HKLM\…\{9143F2FA-BF20-4311-8618-4CCF51B1B80C}) (Version: 1.3.00000 - Dell Inc.)
Dell ControlVault Host Components Installer (Version: 1.7.324.55 - Broadcom Corporation) Hidden
Dell Edoc Viewer (HKLM\…\{3138EAD3-700B-4A10-B617-B3F8096EE30D}) (Version: 1.0.0 - Dell Inc)
Dell Embassy Trust Suite by Wave Systems (Version: 03.04.00.063 - Wave Systems Corp) Hidden
Dell Security Device Driver Pack (HKLM\…\{FF1DDCF4-3A28-4F7F-96D8-E3F4BD1C1702}) (Version: 1.3.039 - Dell Inc.)
Dell SupportAssist (HKLM\…\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell System Detect (HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\73f463568823ebbe) (Version: 5.14.0.9 - Dell)
Dell Touchpad (HKLM\…\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.2.101.228 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (HKLM\…\Dell Webcam Central) (Version: 1.40.06 - Creative Technology Ltd)
Document Manager Lite (Version: 06.09.00.121 - Wave Systems Corp.) Hidden
Dropbox (HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Dropbox) (Version: 3.10.7 - Dropbox, Inc.)
DYMO Label v.8 (HKLM\…\DYMO Label v.8) (Version: 8.4.2.18 - Sanford, L.P.)
EaseUS Todo Backup Free 8.0  (HKLM\…\EaseUS Todo Backup_is1) (Version: 8.0 - CHENGDU YIWO Tech Development Co., Ltd)
EMBASSY Security Center (Version: 03.09.00.092 - Wave Systems Corp) Hidden
EMBASSY Security Setup (Version: 03.09.00.102 - Wave Systems Corp) Hidden
EQ7 (HKLM\…\InstallShield_{E8B55B7D-A94D-4C4B-AFEB-4C4AAAFEB071}) (Version: 1.30.0000 - The Electric Quilt Company)
EQ7 (Version: 1.30.0000 - The Electric Quilt Company) Hidden
ESC Home Page Plugin (Version: 03.04.00.029 - Wave Systems Corp) Hidden
Evernote v. 4.6.3 (HKLM\…\{4C8BBCC8-8363-11E2-A3F4-984BE15F174E}) (Version: 4.6.3.8096 - Evernote Corp.)
Gemalto (Version: 01.01.00.0000 - Wave Systems Corp) Hidden
Google Chrome (HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Desktop (HKLM\…\Google Desktop) (Version: 5.9.1005.12335 - Google)
Google Talk Plugin (HKLM\…\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Greenshot 1.0.6.2228 (HKLM\…\Greenshot_is1) (Version: 1.0.6.2228 - Greenshot)
HD Tune Pro 5.50 (HKLM\…\HD Tune Pro_is1) (Version:  - EFD Software)
iCloud (HKLM\…\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)
Integrated Webcam Driver (1.03.02.0919)   (HKLM\…\Creative OA001) (Version:  - )
Intel(R) Graphics Media Accelerator Driver (HKLM\…\HDMI) (Version:  - Intel Corporation)
Intel(R) Network Connections 14.1.111.0 (HKLM\…\PROSetDX) (Version: 14.1.111.0 - Intel)
Intel(R) PROSet/Wireless WiFi Driver (HKLM\…\{10193AAA-D72D-4A1A-B8AD-A9D9221595E7}) (Version: 12.04.0000 - Intel Corporation)
Intel(R) TV Wizard (HKLM\…\TVWiz) (Version:  - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\…\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
iTunes (HKLM\…\{025E78AC-BD91-4E9E-B165-3C09D4084BA4}) (Version: 12.2.2.25 - Apple Inc.)
Java(TM) 6 Update 33 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83216033FF}) (Version: 6.0.330 - Oracle)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Learn to Play Bridge (HKLM\…\Learn_to_Play_Bridge) (Version:  - )
Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft IntelliPoint 8.0 (HKLM\…\{00F93853-D9D3-4795-A89E-84CCBA0205C9}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office 2003 Primary Interop Assemblies (HKLM\…\{91490409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.6553.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\…\{91110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Outlook Personal Folders Backup (HKLM\…\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\…\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\…\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\…\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (HKLM\…\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
MobileMe Control Panel (HKLM\…\{710BF966-43C8-4216-A8EC-BC4E169FF7C1}) (Version: 3.1.8.0 - Apple Inc.)
MOM Workstation 7i (HKLM\…\{B4692ABD-16DE-4391-AEB8-E9F10C119F8D}) (Version: 7.0 - Dydacomp Development Corp)
MOM Workstation 8 (HKLM\…\{00C2A395-C1D0-4A72-ACC2-B365D1339C60}) (Version: 8.00.0000 - Dydacomp Development Corp.)
Mozilla Firefox 41.0.1 (x86 en-US) (HKLM\…\Mozilla Firefox 41.0.1 (x86 en-US)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\…\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Musicnotes Software Suite 1.5.5 (HKLM\…\Musicnotes Combined Installer_is1) (Version: 1.5.5 - Musicnotes Inc.)
NTRU TCG Software Stack (Version: 2.1.29 - NTRU Cryptosystems) Hidden
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
PaperPort Image Printer (HKLM\…\{2BC2781A-F7F6-452E-95EB-018A522F1B2C}) (Version: 1.00.0000 - Nuance Communications, Inc.)
PDFCreator (HKLM\…\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.8 - Frank Heindörfer, Philip Chinery)
Peachtree Accounting 2011 (HKLM\…\InstallShield_{FC87D80E-5BC6-4EE8-9B09-EBA4F9C0A1C2}) (Version: 18.00.00 - Sage Software, Inc.)
Peachtree Accounting 2011 (Version: 18.00.00 - Sage Software, Inc.) Hidden
PeachTree Signature Ready Forms (Version: 6.11.1 - Sage Software SB, Inc.) Hidden
Pervasive PSQL v10 SP2 Workgroup (32-bit) (HKLM\…\Pervasive PSQL v10 SP2 Workgroup (32-bit)) (Version: 10.10.126 - Pervasive Software)
Pervasive PSQL v10 SP2 Workgroup (32-bit) (Version: 10.20.034 - Pervasive Software) Hidden
PowerDVD DX (HKLM\…\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 8.3.5424 - CyberLink Corp.)
Preboot Manager (Version: 02.09.00.071 - Wave Systems Corp.) Hidden
Private Information Manager (Version: 06.04.00.047 - Wave Systems Corp.) Hidden
QuickBooks (Version: 24.0.4008.2403 - Intuit Inc.) Hidden
QuickBooks Pro 2014 (HKLM\…\{4A21D17E-2FE8-42CD-88B7-ACF8E8860834}) (Version: 24.0.4003.2403 - Intuit Inc.)
Quicken 2008 (HKLM\…\{3B0F52AC-EF5C-4831-B221-06C782E41280}) (Version: 17.1.1.24 - Intuit)
QuickTime 7 (HKLM\…\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Roxio Creator DE 10.3 (HKLM\…\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}) (Version: 10.3 - Roxio)
Safari (HKLM\…\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Sage Integration Services (HKLM\…\Integration Services) (Version: 2.2.2240 - Sage Technology)
Sage Message Center (Version: 2.00.0000 - Sage Software Inc.) Hidden
ScanSoft PaperPort 11 (HKLM\…\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}) (Version: 11.2.0000 - Nuance Communications, Inc.)
Security Wizards (Version: 01.07.00.016 - Your Company Name) Hidden
Skype web features (HKLM\…\{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}) (Version: 1.0.3971 - Skype Technologies S.A.)
Skype™ 7.1 (HKLM\…\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
SO32MMWrapper (Version: 1.6.334.60 - Broadcom Corporation) Hidden
Spotify (HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\Spotify) (Version: 0.9.8.217.gaaee3562 - Spotify AB)
Spybot - Search & Destroy 1.3 (HKLM\…\Spybot - Search & Destroy_is1) (Version: 1.3 - Safer Networking Limited)
Stamps.com (HKLM\…\Stamps.com) (Version:  - )
SupportSoft Assisted Service (HKLM\…\{5A3F6A80-7913-475E-8B96-477A952CFA43}) (Version: 15 - SupportSoft)
TeamViewer 10 (HKLM\…\TeamViewer) (Version: 10.0.45862 - TeamViewer)
Trusted Drive Manager (Version: 3.1.0.116 - Wave Systems Corp.) Hidden
Wave Infrastructure Installer (Version: 07.00.21.0000 - Wave Systems Corp) Hidden
Wave Support Software (Version: 05.10.00.046 - Wave Systems Corp) Hidden
Windows Driver Package - Dell Inc. PBADRV System  (01/07/2008 1.0.1.5) (HKLM\…\9D57DE505B6D8C710EF3B74BE638DBB936EED8A3) (Version: 01/07/2008 1.0.1.5 - Dell Inc.)
Windows Live Essentials (HKLM\…\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\…\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.135\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{05EC5C13-D255-4592-9CCB-98615172F0D6}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{078759D3-423B-48AD-AB6A-5638C2884DBE}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{078C5F0B-8AEE-46B1-ABB6-EFE6924DD707}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.99\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0997898B-0713-11D2-A4AA-00C04F8EEB3E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0ADF9C35-0D5E-4B75-88DD-B64868907E17}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0DDC5AA7-2EA2-4FBB-9EB7-7EE250B11B5A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.57\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.25.5\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{10E2414A-EC59-49D2-BC51-5ADD2C36FEBC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1164C69B-F71B-4B93-82F9-43151801E309}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{123FAF7F-3FB1-4B8F-AD18-0047401D436A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{14074E0B-7216-4862-96E6-53CADA442A56}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.27.5\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1704815D-0A03-44ff-8646-1AE1FE84E313}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2008\qbw32.exe => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1B3210AF-E236-46D4-83EF-6421F2FF543C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1C0F439D-7C29-4BDE-8952-4EEB6A49E048}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1C1800C1-3258-44C2-BE80-3DEADB6C5E39}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1E78DD72-771E-42BF-8B4B-363CEB18E07B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.69\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{22664BE2-0806-4BA4-8643-DE40C9149176}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.2.183.39\goopdate.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{2A9EBDB5-0600-4E8C-B910-4001BEB2DD8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30276B4F-F25C-457C-A4B7-08574F8EA528}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F391-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F499-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30C3B080-30FB-11D0-B724-00AA006C1A01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{32D32337-1511-4416-85C5-FD96C99322A0}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{33337270-F789-11CE-86F8-0020AFD8C6DB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{349D777D-F7A2-4AAE-967F-A54F05A7FF3B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBFinder.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.23.9\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{37A2FC00-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{37A2FC02-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58721-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\COMObjectFactory.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58742-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58743-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58744-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3928D252-6BB4-4C0D-BE70-1E03AF93D464}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3CDEA288-D759-4C3B-B07F-7AFBCC842D98}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3D154A2D-D911-437E-A30C-5F56A9B7081D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3E1A2BBD-5707-4646-B268-518B997DC94D}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2008\qbw32.exe => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{42AEDC87-2188-41FD-B9A3-0C966FEABEC1}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4716D3CE-55DB-4D2A-818C-87D912895890}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4844F3F7-2161-4AC4-B219-B3B4311782AA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4A56F19E-9F50-4F43-93C8-050E44AA83A9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4E5E74B5-8EB5-4859-A335-837EED412620}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4E77131D-3629-431C-9818-C5679DC83E81}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{4F77EC9D-F002-43E8-930C-6913A763FC9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5249684A-D7A2-4DBE-94F4-B90923A7BC64}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5349004A-12AB-4543-A596-6DC2F8D2B3F2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{53BD6B4E-3780-4693-AFC3-7161C2F3EE9C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5428A9ED-6CD8-11D6-9C8A-0001023DCAA2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{547C8F00-5567-4AE3-8BB0-CC3CE2AB9070}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{57D590F1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{596801D8-2C9D-4627-9C67-195CB81B655A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5B7331FA-8910-4748-A8A4-60B445041F28}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Chrome\Application\45.0.2454.101\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.1\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{5ED8AC89-B2DE-476D-8EEA-E170B2FCB058}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.145\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.123\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{6746C347-576B-4F73-9012-CDFEEA251BC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{6A01FDA0-30DF-11D0-B724-00AA006C1A01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.153\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{6E682784-1ECA-4CF2-988D-96B6E89E9A4D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{70478C56-E77F-4134-B3E3-3B18EE036D71}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{7057E952-BD1B-11D1-8919-00C04FC2C836}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{71F96385-DDD6-48D3-A0C1-AE06E8B055FB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{72165AE3-91E6-415F-8ADD-972EC6A4E543}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{725F645B-EAED-4FC5-B1C5-D9AD0ACCBA5E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{72C57034-02C4-4E9F-BF9C-CA711031757E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{72EB61E0-8672-4303-9175-F2E4C68B2E7C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{7694F1CD-A55B-4B7C-8820-A90892EB4E9E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{76BE8257-C4C0-4D37-90C0-A23372254D27}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.13\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{7DBF8260-30AD-4D1B-876A-8032B87B809F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{7EFC002A-071F-4CE7-B265-F4B4263D2FD2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{8034BBB8-2145-4159-9A34-51E21A0A981F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{807E5A10-4856-4F9A-8E3C-A1F7E75648B3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{828E5386-74CF-4019-B356-C857CD028A7D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{82CC31B3-53B4-4161-A4E9-6B4F1290A6C8}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{8572570D-12D9-4F2C-8BB8-EB8848178B94}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{8E590317-1329-11D1-B70B-00805F29CD16}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\qbw32.exe (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{8FEDE364-AB37-4551-80C9-6D468E222AB2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.24.15\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.149\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{934D4698-6A59-48F8-9F29-9FB30670320E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F2-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F3-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F4-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F5-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F6-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9D9B61F7-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A3CCEDF7-2DE2-11D0-86F4-00A0C913F750}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.22.3\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.165\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A58C4EAB-2DB8-445E-9CAE-2AE197A5C708}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A63E42D0-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A63E42D2-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{A85A07E2-D641-4C28-8DB9-F0A70DA193D3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{AF02484C-A0A9-4669-9051-058AB12B9195}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{AF5E0A13-CEAB-47CE-991D-77E82CD1BF3F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B056521A-9B10-425E-B616-1FCD828DB3B1}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B10BFAC3-EFF1-40D9-ADA0-BEBE037C24CA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B2952B16-0E07-4E5A-B993-58C52CB94CAE}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B66F2BF1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{BCD594EA-15C3-4FD8-B92B-114BB9694537}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBCtrIPMDS2.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.26.9\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.115\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{CBEF1FB5-78FF-4B14-9B0F-275493FB589C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{CE18240D-F3F8-43AE-9EA0-A0DC85A95375}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{CEC273C7-7DA3-4A70-A38E-8BD51A9C5EB5}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.25.11\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D14FD6B3-6A9F-4537-9460-07B836707127}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D4A12AAF-E15E-470B-A6B6-63032186F91F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D58960BA-2EF3-4910-9E34-C911B1710180}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D84C5B01-71C4-4EFD-A3FA-C90A6477F1FA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9B3211D-E57F-4426-AAEF-30A806ADD397}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9B9C060-0954-11D3-9E07-00104BD2BE34}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSource.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6F81-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6F84-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6F87-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6FA1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6FA6-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6FB2-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\StorageClasses.dll (Intuit, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{D9BC6FC1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DA654E0C-E75D-4507-8AC2-71698C5B5C93}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\qbw32.exe (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.65\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DB6EFB73-5153-43B7-8078-C6FFC4C0238C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DCB2B478-EFF6-48F6-B718-13E98876854E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DFD0AF10-B86C-4AF3-B609-1348D513E565}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E1A173E1-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E1A173E3-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E472F348-6763-455A-B069-98D554D7CB3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E6E4DF8B-17CE-43ED-B2C7-2CE10457552D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E7D2D0F6-B754-438D-B5C9-BF848D311A0F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.28.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{EADA914E-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{EAEF733D-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.22.5\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{EE09B103-97E0-11CF-978F-00A02463E06F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F19F9A95-7A43-4A93-80B0-C9C1FF6F63F9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F2C593CC-74B2-4F71-8556-DD4D426D0409}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F414C261-6AC0-11CF-B6D1-00AA00BBBB58}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F497EB91-EA9A-49DC-8DCF-7E162FA638CF}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F6150BE7-A58C-493B-8DE1-274160B1156A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{F9EF917A-E55E-4242-B205-E778395AC313}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FAC93D42-FFC2-11d1-9DEB-0008C7A08EBA}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\qbw32.exe (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB17915F-06D1-4214-A902-CC5EE05186E9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB359C2A-6927-4AD7-8F1B-B6472CA7CDE7}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.111\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Marcia\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FD73FE5B-12B1-4E8A-BDA9-9B4A79EABC99}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.24.7\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InprocServer32 -> no filepath

==================== Restore Points =========================

16-09-2015 18:38:25 Windows Update
20-09-2015 09:10:55 Windows Update
23-09-2015 21:31:25 Windows Update
27-09-2015 15:46:35 Windows Update
03-10-2015 13:46:24 Restore Operation

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:04 - 2009-06-10 14:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0AD8C0FE-ACD3-4727-953B-085CDBE2D973} - System32\Tasks\{1100DC68-6371-49D0-A227-094B9BE24CF7} => pcalua.exe -a "C:\Program Files\InstallShield Installation Information\{FC87D80E-5BC6-4EE8-9B09-EBA4F9C0A1C2}\_setup.exe" -c -runfromtemp -l0x0409  -removeonly
Task: {0F8DDC65-C994-4261-8BE0-6B1F04126A87} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-02-03] (PC-Doctor, Inc.)
Task: {29F2C918-F1F8-4DB2-A0DE-9D9CB58B6AC2} - System32\Tasks\{5563DDFB-5138-4EBD-84AE-FD143EDE2EAD} => pcalua.exe -a D:\SETUP.EXE -d D:\ -c /AUTORUN
Task: {2A429FF2-5C95-49BA-AE0F-D8C54C1BA516} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21] (Adobe Systems Incorporated)
Task: {40747DAC-2FC2-4DCC-948B-ABBD463744D7} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA => C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {5793FB69-0E37-4CEB-BA69-334A0D7C2C73} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA => C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {79DB04B8-F903-4CC4-9FDA-24670BCC9428} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {887099DA-D6F5-466A-86EF-3C36301DA6AC} - System32\Tasks\{7809E627-E7D0-49A8-9823-1C9EC9901245} => pcalua.exe -a C:\Users\Marcia\Desktop\c9853w.exe -d C:\Users\Marcia\Desktop
Task: {8FFB86BB-AD5E-49EB-B490-6DBCED116B17} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {9567373F-1EFF-4F3F-B5D8-FB1991BD5B3A} - System32\Tasks\Carbonite Upgrade Check => C:\ProgramData\Carbonite\Carbonite Backup\CarboniteUpgrade.exe
Task: {ACD18E17-7104-4CAF-8D57-5D90FC4F94BE} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {BAE028E1-6386-4889-A362-CEEB8361DEED} - System32\Tasks\{5F292A1C-837C-4A0B-8AF5-B9CCDD435FE9} => C:\Program Files\Skype\Phone\Skype.exe [2015-01-23] (Skype Technologies S.A.)
Task: {CDE9BE0E-5F8C-47E1-A0D8-EF812EB2CB82} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core => C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D6C5515A-32F2-48E6-9712-F1CDE1936981} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DEE23ADB-11A8-4D0F-B66D-9A56098C5696} - System32\Tasks\{E2DC214E-BADE-4102-B41C-7FDB3749219F} => pcalua.exe -a "C:\Users\Marcia\Desktop\MG Printer F30_F50_2KXP_v40.exe" -d C:\Users\Marcia\Desktop
Task: {E4AFF33B-5E52-40C1-B2CC-0AB132ECA08B} - System32\Tasks\{6AC84E1D-A30C-4D64-94F7-0B3467F2D16B} => pcalua.exe -a D:\setup.exe -d D:\
Task: {FF32ABFD-2E36-40E8-BF7C-33165B2EBBAE} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core => C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core.job => C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA.job => C:\Users\Marcia\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001Core.job => C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2950318581-11869349-2311908374-1001UA.job => C:\Users\Marcia\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2010-01-06 12:56 - 2001-10-28 18:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2009-07-27 11:15 - 2009-07-27 11:15 - 00249856 _____ () C:\Windows\system32\wxvault.dll
2015-03-04 21:23 - 2014-12-15 02:04 - 00253992 _____ () C:\Program Files\EaseUS\TrayPopup\TrayTipAgent.exe
2015-03-04 21:23 - 2014-12-15 02:04 - 00223272 _____ () C:\Program Files\EaseUS\TrayPopup\traynet.dll
2015-03-04 21:23 - 2014-12-15 02:04 - 00275496 _____ () C:\Program Files\EaseUS\TrayPopup\libcurl.dll
2015-03-04 21:24 - 2014-12-15 02:04 - 00118328 _____ () C:\Program Files\EaseUS\TrayPopup\zlib1.dll
2015-03-04 21:24 - 2014-12-15 02:04 - 00249896 _____ () C:\Program Files\EaseUS\TrayPopup\uexper.dll
2012-10-09 08:31 - 2012-10-09 08:31 - 00085504 _____ () C:\Program Files\DYMO\DYMO Label Software\DYMO.Common.dll
2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-12-10 04:29 - 2014-12-10 04:29 - 00623432 _____ () C:\Program Files\Intuit\QuickBooks 2014\boost_regex-vc100-mt-1_47.dll
2010-02-15 21:10 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2015-10-03 17:19 - 2015-10-03 17:19 - 00071168 _____ () c:\users\marcia\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpo9zdz2.dll
2015-10-03 12:09 - 2015-09-23 16:07 - 00012800 _____ () C:\Users\Marcia\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-10-03 12:09 - 2015-09-23 16:07 - 00779776 _____ () C:\Users\Marcia\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-03 12:09 - 2015-09-23 16:07 - 00056320 _____ () C:\Users\Marcia\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-03 12:09 - 2015-09-23 16:07 - 00012288 _____ () C:\Users\Marcia\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2012-09-08 12:16 - 2012-09-08 12:16 - 00433664 _____ () C:\Program Files\Evernote\Evernote\libxml2.dll
2012-09-08 12:16 - 2012-09-08 12:16 - 00315392 _____ () C:\Program Files\Evernote\Evernote\libtidy.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Software\Classes\.exe:  =>  <===== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\dell.com -> dell.com

IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.00hq.com -> .00hq.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.75tz.com -> .75tz.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.aavc.com -> .aavc.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.acjp.com -> .acjp.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.count.cc -> .count.cc
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebav.com -> .ebav.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebaw.com -> .ebaw.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebch.com -> .ebch.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebdv.com -> .ebdv.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebdw.com -> .ebdw.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebgo.com -> .ebgo.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebjp.com -> .ebjp.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebkb.com -> .ebkb.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebkn.com -> .ebkn.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebky.com -> .ebky.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.eblv.com -> .eblv.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebmu.com -> .ebmu.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ebvr.com -> .ebvr.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ecmh.com -> .ecmh.com
IE restricted site: HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\.ecmp.com -> .ecmp.com

There are 6203 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marcia\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: AVG Security Toolbar Service => 3
MSCONFIG\Services: avg9wd => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: buttonsvc32 => 2
MSCONFIG\Services: CarboniteService => 2
MSCONFIG\Services: Credential Vault Host Control Service => 2
MSCONFIG\Services: Credential Vault Host Storage => 2
MSCONFIG\Services: dcpsysmgrsvc => 2
MSCONFIG\Services: DymoPnpService => 2
MSCONFIG\Services: EaseUS Agent => 2
MSCONFIG\Services: GoogleDesktopManager-051210-111108 => 3
MSCONFIG\Services: IAANTMON => 2
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: LMIMaint => 2
MSCONFIG\Services: LogMeIn => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: Peachtree SmartPosting 2011 => 3
MSCONFIG\Services: psqlWGE => 2
MSCONFIG\Services: QBCFMonitorService => 2
MSCONFIG\Services: QBFCService => 3
MSCONFIG\Services: QBVSS => 2
MSCONFIG\Services: SecureStorageService => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SMManager => 2
MSCONFIG\Services: STacSV => 2
MSCONFIG\Services: stllssvr => 3
MSCONFIG\Services: tcsd_win32.exe => 2
MSCONFIG\Services: TdmService => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: UMVPFSrv => 2
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Apoint => C:\Program Files\DellTPad\Apoint.exe
MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BrMfcWnd => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: Carbonite Backup => C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
MSCONFIG\startupreg: ChangeTPMAuth => C:\Program Files\Wave Systems Corp\Common\ChangeTPMAuth.exe /T:NTRU12
MSCONFIG\startupreg: ControlCenter3 => C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: DellConnectionManager => "C:\Program Files\Dell\Dell ControlPoint\Connection Manager\Dell.UCM.exe"
MSCONFIG\startupreg: DellControlPoint => "c:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"
MSCONFIG\startupreg: DellSystemDetect => C:\Users\Marcia\AppData\Local\Apps\2.0\ND5GLETJ.RGC\Q7X5HPTO.OMH\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
MSCONFIG\startupreg: DLSService => "C:\Program Files\DYMO\DYMO Label Software\DLSService.exe"
MSCONFIG\startupreg: Google Desktop Search => "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAAnotif => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: IndexSearch => "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
MSCONFIG\startupreg: IntelliPoint => "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
MSCONFIG\startupreg: Intuit SyncManager => C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe  startup
MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: PaperPort PTD => "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
MSCONFIG\startupreg: PDVDDXSrv => "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
MSCONFIG\startupreg: PeachtreePrefetcher.exe => C:\PROGRA~1\PEACHT~2\PeachtreePrefetcher.exe /configfile:peachtreeprefetcher.winstart.config
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: PPort11reminder => "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SSBkgdUpdate => "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray.exe
MSCONFIG\startupreg: USCService => C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe
MSCONFIG\startupreg: WavXMgr => C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{1978CD17-990F-4DE3-862C-7B1E9E771F56}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{246E8640-87B3-4D1A-9A2A-2068D6B661D7}] => (Allow) svchost.exe
FirewallRules: [{CF7353AB-B7DF-4A9E-84B9-E15970E0370C}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{1564F458-F112-45BE-9C0B-C1C1B6003EC0}] => (Allow) C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe
FirewallRules: [{1BC87324-0A49-418D-9B39-41E203BFFF4A}] => (Allow) C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
FirewallRules: [{76424043-AC0E-42C1-B5BC-7013ECBC148C}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{17C1C40F-8CF3-4829-9DB3-13364EDDD21B}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{25402B01-EBD6-426B-9975-DC19A8F94DB8}] => (Allow) LPort=7000
FirewallRules: [{ACDCBF25-E149-4914-B3F8-FBF62E452EEB}] => (Allow) LPort=7000
FirewallRules: [{44FC6524-32EC-47C9-B6C1-5E67C1A21DB7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{4FD15344-1894-46E4-80E6-C9C05191590F}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{AE65F5CF-B51D-4E1D-BB45-9E80A98E5290}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{7225F742-0939-442C-BF33-DF5B186AD573}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7B6E8E52-C209-4792-B108-A5D69C69145F}] => (Allow) C:\Program Files\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{DC36AEC6-C13E-42A3-A712-A943CD91E6B5}] => (Allow) C:\Program Files\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{04C4ACBF-EB06-4588-8E1E-A3B70C7F01E5}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C3DACA6F-1B62-4748-B9BF-279350F71FB6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{67E7AF0D-A735-4C9A-89D1-5B844CEB3BA6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{47A1CDD2-1392-42F4-B6E6-D45D1201FB7A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8133BE60-C4B3-4DF6-8803-27D1FEBB3FB3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{77C136DC-A2A3-4611-9E48-1A5AC1F0542B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2E1CFFD5-2CBD-4568-82C9-3F64F7B5651E}] => (Allow) C:\Program Files\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{2A5DA187-9690-4BDF-83BB-22121E19850C}] => (Allow) C:\Program Files\Skype\Plugin Manager\skypePM.exe
FirewallRules: [{16CA66E0-542A-452C-8671-ADEDAB0FF2E2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AC333617-E7BD-435A-A4DE-6342253998BC}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C7706243-1ADB-4671-A8ED-C7110BB8CC62}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BFBCB981-1E14-4F85-B1B9-7D4399D64E9E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C65DDEFB-E7D5-44E7-A015-AC6CAFF0F8B1}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{FFF6439B-0CF2-40F5-88FA-C67E2D542831}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{28D2D29D-9A75-4003-947A-2436B7791A51}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{15B087A9-75DD-4382-AD71-B3913B9E5FB1}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{92E0D14D-61EC-4CA8-B4C4-A21A2DB4A7A5}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F53A9F52-2F50-42A1-AC29-5A04F9236AE4}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A7338A14-02D3-4A24-8E35-0D34079A02B9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{852F6FA4-2D54-428E-B60D-C69491F664B3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2F07250A-F5B8-4C00-84D6-CEBA4A7DFED3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{42DB1572-7D12-4A26-9B3A-F2606156ADF8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{05EFE799-B6B3-4DA6-8EB4-C12641778A22}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DC48DBAF-E9E6-4811-ACF3-52AFD5A8C0F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A9B6DD21-DB8C-4C7C-A1DD-78C42FB15757}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4516CCF4-D5FC-4BC0-9606-3BD728E66498}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{68CB04B2-3CFA-4828-88F8-4918BC174148}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D943075C-E253-4A68-97AE-06359B738D44}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{67D49DAD-DD87-462A-820A-8194EBC41A01}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{972EDDFD-B683-4DD9-B579-FA565C97DE2F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C85BAC79-8D89-441B-808A-9EEEBCBEBF9D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BF61DE68-39E9-4B6F-886F-D03CA8AED32C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4141EE22-4C38-4CA5-AC37-D72BE8D8AE43}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{FA0F5490-B914-4A28-824B-0F913B860284}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{565F7651-DE8D-4F5B-8007-5C495EF407D3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9E562A39-06BB-42D5-AA35-7AB4C958020E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DABCC797-AC7C-478E-A0EC-98F8D5A41826}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EF0D48B2-11D7-47E7-9B45-435F327DFD32}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0CC60B99-A0F7-4CB9-B46A-030D082E7F5F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DD964C24-7FE0-4E6F-864E-EBF0D1EF794B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{797FCAF4-FD3E-4492-9354-02524406C50F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{E9FFAE77-BB6E-478C-9090-C40FE56AA988}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2B152EAE-34E3-42DA-92C3-82429527A035}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7E4C0D7B-66F2-4206-AC32-239190B7B530}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4925D62A-B6AE-440C-9C47-983B06EB5F6E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A017B50D-974B-4438-ABC2-57348AF5B7C8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3F328B6D-7C31-410D-BAF7-EAB06D636FFB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{50E819B1-B2C1-43CD-83C2-518B06504D92}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CB4A7496-74A7-4553-983E-25619996C81E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7214D54F-93EC-4C37-818F-C9D69BFB1873}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B8E88994-1431-4F9C-B6BE-947C234C26A9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{02B0EDD0-BA9C-4E8B-BE97-085D91A2AC9E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C97925AD-6B3C-4E99-8890-B10C74FB1C30}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9DC6B4B1-6244-43BD-81CE-186BE8DA14B2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{64F37175-A982-4315-85C0-0B6C06647229}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4980B1A3-9635-44EB-91DE-2759A55ECD65}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{703D3B9B-199D-4852-A87E-D9287BFBB690}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EBBEE8D0-8518-4B92-B925-D14116710560}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F6431121-87B2-4E6D-A17B-9BD9AA03A22F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5EAADB62-B721-4AA2-BEB9-0C1B84B960F5}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D6E1803B-3418-4164-9B17-5790DF608F5F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{581BE09F-ABBB-4D60-9730-1B89831437BD}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B99E9D00-F602-4DC5-930D-E53630669620}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8DD4F691-B461-43EB-8F2D-6D27C1EBB465}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{319E9807-F202-490D-875C-7D080CDC6BD9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F7E65A32-F9EF-412C-A20D-20A88A379658}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3E40F4AD-A9BD-433E-8D6E-8D955C2F7C2B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0F957FA2-9B97-4EBC-AFF1-76335FD9047B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{E652D724-3DED-471A-A263-2B29C9F8CA8B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{778F8006-E0B5-447D-8374-B92F2B15F611}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{82299C4E-581E-4FB9-A9DB-F0C204F067A2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0060AEBB-B1CE-4184-98CE-FEE7E9FB5E69}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3D262997-CB12-48B0-853F-4A5F8B01A0E7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D814F872-88E8-4223-B208-AF9EBA3E1524}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{E3260282-2A8A-4579-9B54-B48377C897A8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BFC78F09-FF43-49A4-8F8F-F518444102AB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EDBDAC96-DBB3-4123-9FF5-99FAB558A364}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6F16D449-6486-47CE-A259-3F2A251F648A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6858D457-441C-49CB-A0DA-E5C70991BAA9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{653DAF83-B1F7-4CBE-BD47-C40400D9D620}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{376AEF74-29BB-4E1F-8E58-C5BD7F8138BB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8F631196-C23F-44FF-B739-3DE199F3F2AB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F439B46B-F4E8-49CD-A7DA-5757573926D8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9D891065-F036-4422-84F5-6CE8AB1B0922}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B8BCB134-AA32-4510-AB41-3361AEE06D7F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{1425D80D-9F95-4D97-9E34-7C15F52BD133}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3FECCCBC-638A-4F45-B849-58B0BAF9DD25}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B15C312D-E302-47AD-941B-EF13B0D1DE20}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{1BDE5B66-B825-4C26-A244-E18446A121F8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5C17D642-A463-4292-82A1-10AED0539F7C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DDEF58DE-6DBF-4FD4-9BC2-B7B60B6677A2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CD7B4449-62D9-419A-9670-62D845D55236}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{E8CA64A1-F315-4C0F-8130-7F09D816CD5B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A807ACBB-DAB0-4912-B6B5-7860804B3827}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5EF8496E-A64C-49E0-A98F-DCE10A9553DB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2860C904-E980-47C3-B0D6-662D838CEEE0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{91E43785-B1D2-496B-9535-871295A34E4D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6C75C05D-96F1-457C-8140-2B29B38F4101}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5E7BF9F1-D658-43AD-8662-462F03F41BAC}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{66BEFFE0-21C9-4185-9F8C-03697D3790F1}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{64B1BA4E-279D-4A4B-9834-D5C328C8A1F6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D3B20C8F-7E60-46A6-B42F-041B2DBCCA9B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{63C6CA5A-360D-4463-AD71-DE9003219072}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{43F7ADF9-6796-4E45-9C4F-1B31494D7F24}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D5CD5A37-94D8-4E7B-A8D6-263F234917DB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BC8F42C5-3C40-4762-89C1-CFE4862FDEDE}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DDC61154-4BB4-45D1-8C51-91AB17442661}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2F0AA92F-6006-4E91-902C-09655A9D35DB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AD8C97FC-0507-40AA-AD29-D7CDD0C84F87}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{E7BF5803-8D6C-413A-910F-B1769C72FC3C}] => (Allow) LPort=2869
FirewallRules: [{0F4B7034-F8AA-463F-A77F-C146B0198FF5}] => (Allow) LPort=1900
FirewallRules: [{A30D4195-0BF2-439B-A2A8-49670A41247C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{88179BA7-C0B8-46A2-BAC5-FD3EB8391DB4}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{58554CE2-872D-44DB-85AC-7C917E0A2018}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{30E3CBF6-D7B7-451C-B2E3-29CEADC18809}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5A356931-6D37-4E7B-8C2C-50D1A0324353}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3DB8FB07-0EE9-48AE-A379-74012A8BB421}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{11B774F4-20B4-40D7-8EB9-666CDB92943C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{A5D32CA1-F0BE-41E7-BC7C-0F20EA6A49CB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B7D1A7C0-32F8-4A2D-9F20-7545A9303DEF}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5F8799BC-3F8D-4E35-8A1C-C11DFC635BE9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D7E0EBDD-291C-463A-96F3-385117A3BAC5}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CBB99F71-7CFF-48A1-8C18-8AFEA213EA10}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{FCA3920A-F14B-4826-9FEC-8E8802EF6CEB}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{1E77FC21-BBA5-4494-B8C7-3574E3AC8C57}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{593989B1-D7E3-49FC-9DCD-E4FE9D6A731A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5384296B-4294-4C54-BFF7-DC14701B4344}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9E2F5DE2-11D8-46FE-BB74-E979F53F483B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{68E62ADC-5C47-441D-923B-A8064C0F801A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BAB114FE-3334-4F12-8C55-2AD907378654}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{520470A3-C5C2-40E6-9D76-F039EE9C0A1D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8C0EF246-5683-401E-8AC8-A36FCFDEE6F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DFEA2B47-3920-4AB9-83E0-93F6F07702B3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0AD171AC-F40E-4083-BB6C-CF0DFEBA0E92}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6636DE27-E470-42F4-B177-F06F1FEBFAF9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C3D430CE-2687-415A-8688-BB05C895EEC4}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{36E68D07-BCFF-497F-96EB-1B0E809C5BD6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7D96ED72-7F38-43C0-B7FF-C434D7997EFE}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9262BF80-9410-4015-9683-F230503387EB}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{12ECCFB1-4FC0-4890-BA78-9C9BAAA28BD0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{54BBDB35-92D7-4A4F-91DA-B7C163F830A4}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DB15EAFB-89E3-4D35-AF99-C7889EF276A0}] => (Allow) LPort=1583
FirewallRules: [{A23F0B0A-67E3-4ABA-8868-ADF19A32DC07}] => (Allow) LPort=3351
FirewallRules: [{5FE54676-E790-4BEC-AD6E-8833A1DA1D8F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3BBB3CF4-FE48-492A-B3DF-88BB3A0C1EF2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DA8326B2-F627-4021-9546-E3636E8062B3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{46CE769B-6E88-4057-8DA5-ED9FF03DE96A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F597F10D-EFAF-4C38-9B3E-B7575601C73C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{09D872AF-560D-4BAB-83A2-F6BCC1806FE0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AB76DA99-3EFB-4457-A844-EB26DB95651F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8E443E6F-B407-46E4-AA18-D5707E739636}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{93BE850F-E8E7-4054-B5CD-1C023F1A7A4D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{845F6880-C956-489F-AAEE-10835A0D174B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8F0AE607-FB49-44A5-B3BD-5A2F53DA6790}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{09F97C53-C598-45A2-AB8F-92C6ABD5B413}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{73D6B97E-40A4-4814-8F6A-14A7100FEF71}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0570CA5F-5F3C-4B8F-86D9-E37F5930F432}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{83B24D41-6F99-480E-94CA-B31C8908B85F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{331AED0B-90E9-44CA-806C-A4CFADB321D9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F9486C18-2649-4F2B-A78B-6C174D380435}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{84CA025F-A459-45C1-955F-591ACA5DAAC8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{24BC4E1D-66CE-4A76-8462-3517259080D2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{38F80927-FB27-4D47-866D-BDAD5180CA48}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5C0A7A5F-E504-499E-B374-EB91627C0C71}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0216554C-2978-44FF-A422-79D315242F55}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BBEDA976-812B-4399-8EDA-9484E12C46A8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5D53F77E-57A3-48FB-AB65-6FE10E94083B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F787BC18-2A70-4824-9F3A-F6FAC38E9A8E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4DB70A15-E0A9-4921-AD68-64A373924585}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4FAEC80B-42A4-4EAF-B318-7D40E805F529}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8E6D968F-C7AE-4A18-9420-80C69F9E141F}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F06EB2C5-E744-44C4-906A-7D8E2D215FD6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{730A14BE-2F30-47FE-9EBB-00C5D0EAC800}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F10B6740-90C7-4A68-A724-30BD583A6930}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{18F5BDA2-47AC-4672-ADF4-B5FB6C18DEE3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D0C1B18B-39F2-4772-BC59-B4A10432CA80}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{1F9C201F-94CD-419B-9AC4-23ED633D424B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3C637CF3-4CE3-4741-B955-E64DD54AE04B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{913DB611-9CB9-4B8B-B36F-85921056211C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9E3D2C95-8BED-428D-A837-E0EB19D7DF2C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{71913F71-9437-4CE4-9A34-6D1B470B710D}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3A90C100-BC52-4E3C-9414-16BD0740DF3E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{D97A440C-14A3-449A-99A7-CF56D3C7F53F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7CF6C2C5-4858-4F56-9F65-AF45FB230CC0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{05F04324-2B21-4AB0-8614-45B17F373FD3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{404B62F2-41F0-4048-AC1F-241C3A587004}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B2D03E43-E8F7-4B2D-9928-6F828A99D63A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{91BE28EC-E059-41F9-AB32-53CAC8CA7A63}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B5A7D2BE-9111-4049-A447-6D4F69CC416E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{305889FC-FB58-435C-A39F-ACAD47D0FE56}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{DD0E7ED9-3343-414C-AF16-544F3AE94E8E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AB1DCDDA-B978-4D8A-8883-FE2A3404D109}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0EC70DBC-777A-43F9-8DF3-320B32B1E059}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EE29BA01-6FEC-4081-BDDD-B7ADD8CFF762}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{70F53481-94AE-4D63-960A-02FEDB8CD221}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F7F28D13-9A5A-4C08-B495-88D098196D26}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BD7E9554-D088-4F3E-A5C9-1F2C37B49FBA}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CD6D776F-3685-4538-97D6-D3639F84C127}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{9C6ED565-A163-4373-B330-F61ECEE64DA1}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3A99B377-7109-4F13-88B7-FD33B1CC7FF5}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4FD19657-3671-481F-83BB-BC76B36C1746}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6ED0545A-CA46-461F-AAD4-E6D7B91870A4}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{48E5934D-2EC1-4806-AA99-3C4CC1B73B44}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C1366ECF-0CD3-4294-804C-CD6A05938379}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6D9A718A-7893-432F-AF5F-DDF3D66AF9A0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{5319FCE0-ABF7-4EB8-B9A5-C3B7E460CD92}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{1C057A53-7CEE-4492-9FCD-732AA07A0F50}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{FA16907E-2378-4CA1-9033-CE4EF17DE441}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F13197E2-9DEE-492D-A9E0-F73C70463BCD}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C75C3E6A-B7F8-4AA4-A909-0A1E276BAF62}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A84CF56B-DE85-494D-8489-A055C1EA51A2}C:\program files\pervasive software\psql\bin\w3dbsmgr.exe] => (Allow) C:\program files\pervasive software\psql\bin\w3dbsmgr.exe
FirewallRules: [UDP Query User{3312C983-BE7F-4176-8C15-A4B4A119F4B4}C:\program files\pervasive software\psql\bin\w3dbsmgr.exe] => (Allow) C:\program files\pervasive software\psql\bin\w3dbsmgr.exe
FirewallRules: [{1B119041-27ED-4950-B823-BF92FE19C8E9}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{FFAF0109-1B20-4530-B584-61172FF49D1A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C2BBFAB6-F8AF-45F6-9B07-45F5D7001BD3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{257ACCFF-35DD-476C-A86C-6C4BFB386C2C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{53D2ACA1-A761-466B-BC22-E36805E03EE0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E735EF7A-4953-4CA1-81E7-85B28ABE59B3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{7365CA1E-1BFD-492E-AB24-B903F05E5BC7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{1B734AAA-508C-467E-B075-07C3B95B54CD}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{85D572B6-F429-4BBD-B36C-FD3127520CCC}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6CABB4A8-184C-48D1-A82E-BED2E1BBB946}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{212922DB-7AB6-4637-9FAB-8FE5DB4528D1}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [{FE98C749-BA1A-47E4-AB35-FEAEBE51F6D0}] => (Allow) C:\Users\Marcia\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{ACD5FE14-A39F-4F3D-B7C6-C33C301B7243}] => (Allow) C:\Users\Marcia\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D252109B-4B09-4358-801E-C8FFD7258B38}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4A38E043-7165-4A73-B089-A31E62D9961B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{5ABD614B-3614-4534-996D-7E85420ABA92}C:\users\marcia\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\marcia\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{07F166A5-7E50-4732-800A-69A1E7C55898}C:\users\marcia\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\marcia\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{92BA7451-B901-4C44-85FE-7B614DF94008}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{0D3D0F63-F934-4B6F-8519-17CE3CF6002C}] => (Allow) C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{2CF85CFC-F47A-4FD2-A2D2-82EF3D5529D4}] => (Allow) C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{FEBCFC79-3E8D-4E78-A1DE-5EF80F891EFA}] => (Allow) C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{8B911879-E9CC-4FBB-8EEC-32C648C4E582}] => (Allow) C:\Users\Marcia\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{57565B1B-5FDC-4FAB-BA27-B3C6B07B87F7}] => (Allow) C:\Program Files\Electric Quilt Company\EQ7\eq7.exe
FirewallRules: [{86B06F50-198E-4E77-9AFE-296D4FBCB4E9}] => (Allow) C:\Program Files\Electric Quilt Company\EQ7\eq7.exe
FirewallRules: [TCP Query User{D993DDF8-69F1-4952-AA0A-DF79221F0D9C}C:\users\marcia\appdata\local\temp\lmi4359.tmp\logmein client.exe] => (Allow) C:\users\marcia\appdata\local\temp\lmi4359.tmp\logmein client.exe
FirewallRules: [UDP Query User{5D0E527C-1088-4170-8B22-D41EBD2FD9CB}C:\users\marcia\appdata\local\temp\lmi4359.tmp\logmein client.exe] => (Allow) C:\users\marcia\appdata\local\temp\lmi4359.tmp\logmein client.exe
FirewallRules: [TCP Query User{0567C050-0387-4C3B-B2A9-6FC31E772D92}C:\users\marcia\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\marcia\appdata\local\logmein client\logmein client.exe
FirewallRules: [UDP Query User{AD23A1AF-92F7-43C8-9419-7CCFF5237D57}C:\users\marcia\appdata\local\logmein client\logmein client.exe] => (Allow) C:\users\marcia\appdata\local\logmein client\logmein client.exe
FirewallRules: [{3FA4DB26-E575-48BF-B88D-851328BCD182}] => (Allow) C:\Program Files\Electric Quilt Company\EQ7\eq7.exe
FirewallRules: [{6156188B-D13A-45C2-9204-A9A440802104}] => (Allow) C:\Program Files\Electric Quilt Company\EQ7\eq7.exe
FirewallRules: [{83E0DF2D-A5D9-46EC-B922-E2F74DEF36D5}] => (Allow) C:\Users\Marcia\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{6EB66363-02DC-4BF2-865E-9C8BDEC808EE}] => (Allow) C:\Users\Marcia\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{3A80567C-60B8-479C-BA52-7C53411A26DB}] => (Allow) C:\Users\Marcia\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C420C260-D081-46CC-945B-B15B621D052E}] => (Allow) C:\Users\Marcia\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{EF11C225-AD35-49F9-B970-88363AA3AAA6}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{1A86ACD4-FB23-41E6-8D98-BBFC6E1F44CD}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\qbdbmgrn.exe
FirewallRules: [{E458B6B3-2233-42BC-8992-DBB6F0A46144}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\qbdbmgrn.exe
FirewallRules: [{BABB144E-9E26-4C08-810F-225FB02D7EC3}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\qbw32.exe
FirewallRules: [{6050EA66-C9DB-45C2-BBBB-0A01C71626A4}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\qbw32.exe
FirewallRules: [{23814905-B4AE-4742-9B41-9DBE6F276646}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\qblaunch.exe
FirewallRules: [{9719585A-CAC8-4053-A71F-FA894FB066DF}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\qblaunch.exe
FirewallRules: [{80C4D6FA-5088-4E4A-A527-A2CFFA313BB4}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\dbmanagerexe.exe
FirewallRules: [{C41E14A5-8EE6-43BE-B33B-FA8ED5DCD934}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\dbmanagerexe.exe
FirewallRules: [{74376F3D-1033-402A-890C-127B3AD3E5CA}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\filemanagement.exe
FirewallRules: [{A875B2E9-9025-4869-9DE7-511A61E34275}] => (Allow) C:\Program Files\Intuit\QuickBooks 2014\filemanagement.exe
FirewallRules: [{0E353408-83D3-4BF2-BAA2-DB069ADD61BE}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
FirewallRules: [{C8CA6610-BF64-4C91-962E-B322338B80DF}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
FirewallRules: [TCP Query User{6E114FA2-5804-493F-9322-DD242B1D49AE}C:\users\marcia\appdata\local\logmein client\logmein client.exe] => (Block) C:\users\marcia\appdata\local\logmein client\logmein client.exe
FirewallRules: [UDP Query User{1E2F13E3-5867-49B6-8CB7-40B1E8770BDA}C:\users\marcia\appdata\local\logmein client\logmein client.exe] => (Block) C:\users\marcia\appdata\local\logmein client\logmein client.exe
FirewallRules: [{A6758A8B-24F3-4C7B-9F11-E7672089A8CB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8110B457-6AF6-464A-9DBF-530A5603B732}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{CD6FBC4C-C545-4228-93AA-79FC786DE7FF}C:\users\marcia\appdata\local\logmein client\lmiignition.exe] => (Allow) C:\users\marcia\appdata\local\logmein client\lmiignition.exe
FirewallRules: [UDP Query User{A964E479-F3EC-4215-B27B-8E10ACDCD0FE}C:\users\marcia\appdata\local\logmein client\lmiignition.exe] => (Allow) C:\users\marcia\appdata\local\logmein client\lmiignition.exe
FirewallRules: [{4E18784B-F8D6-4667-A38B-21F9DFC89123}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{7FAE3203-5F88-4EF9-AFCF-6EF702770424}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{BF71BB18-0C06-47F0-82EB-55B29FEE9777}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{FA0053B7-3B80-44BA-A0EB-F654CC587281}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{FBDDD6E8-BD9D-4CD8-B5EF-13827D130C6D}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{1A45433A-43DC-42C2-8B2B-0BE21FD61441}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{1CAED669-F115-4815-9361-6C3672EC8C3A}] => (Allow) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [TCP Query User{072F17D8-DA4F-4BEC-8ED1-D806EC795A08}C:\users\marcia\appdata\local\temp\g2_1611\g2viewer.exe] => (Allow) C:\users\marcia\appdata\local\temp\g2_1611\g2viewer.exe
FirewallRules: [UDP Query User{E390576B-DB9D-4BB6-ADE3-5285B6F61B3D}C:\users\marcia\appdata\local\temp\g2_1611\g2viewer.exe] => (Allow) C:\users\marcia\appdata\local\temp\g2_1611\g2viewer.exe
FirewallRules: [{1DE07571-FD38-4CA8-AE6D-F5627014133E}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{2D656111-A416-4D9E-B63E-577BBC8DEABE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{5CE9EB2B-7E28-4821-8AD6-EE89273B5D5E}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{03DC672E-B6F4-4E67-8101-F68F3DE4D3DB}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5372A318-8514-47C2-B50D-74E078153F77}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{E81855A9-C5A3-41AB-AB76-AD72629354A4}] => (Allow) C:\Users\Marcia\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: cis1284
Description: cis1284
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: cis1284
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (10/03/2015 03:47:49 PM) (Source: Microsoft Office 11) (EventID: 2001) (User: )
Description: Microsoft Office WordWord experienced a serious error the last time the add-in 'stamps.com word 2003 com add-in' was opened.  Would you like to disable this add-in?
To reactivate this add-in, click About Microsoft Office Word on the Help menu, and then click Disabled Items

Error: (10/03/2015 03:19:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program aswMBR.exe version 1.0.1.2252 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 13a0

Start Time: 01d0fe279e28351d

Termination Time: 2246

Application Path: C:\Users\Marcia\Downloads\aswMBR.exe

Report Id: 7ea33b93-6a1c-11e5-980a-0024e8f40aec

Error: (10/03/2015 01:56:21 PM) (Source: System Restore) (EventID: 8200) (User: )
Description: Failed to initiate System Restore (Windows Update).

Error: (10/03/2015 01:36:12 PM) (Source: System Restore) (EventID: 8200) (User: )
Description: Failed to initiate System Restore (Windows Update).

Error: (10/01/2015 09:08:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program explorer.exe version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: c28

Start Time: 01d0fcc29b77c298

Termination Time: 999

Application Path: C:\Windows\explorer.exe

Report Id:

Error: (10/01/2015 08:09:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d6727a7
Faulting module name: databasemanager.dll_unloaded, version: 0.0.0.0, time stamp: 0x54882b85
Exception code: 0xc0000005
Fault offset: 0x57121076
Faulting process id: 0xba4
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3

Error: (10/01/2015 08:00:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program WINWORD.EXE version 11.0.8411.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: da4

Start Time: 01d0fcbc6d2cc306

Termination Time: 3229

Application Path: C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

Report Id: ec4ae0a7-68b0-11e5-b4f2-0024e8f40aec

Error: (10/01/2015 03:40:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 40.0.3.5716 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1600

Start Time: 01d0fc96b1f473af

Termination Time: 6737

Application Path: C:\Program Files\Mozilla Firefox\firefox.exe

Report Id:

Error: (10/01/2015 12:53:05 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2015/10/01 12:53:05.585]: [00004720]: lperrcode->api = 1 , lperrcode->code = 2

Error: (10/01/2015 12:53:04 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: WDLMW BrtWDLMW: [2015/10/01 12:53:04.041]: [00004720]: lperrcode->api = 1 , lperrcode->code = 2

System errors:
=============
Error: (10/03/2015 11:21:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Microsoft Antimalware Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 100 milliseconds: Run the configured recovery program.

Error: (10/03/2015 11:21:49 PM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )
Description: %%860 Real-Time Protection feature has encountered an error and failed.

 Feature: %%834

 Error Code: 0x80070006

 Error description: The handle is invalid.

 Reason: %%837

Error: (10/03/2015 11:21:01 PM) (Source: Microsoft Antimalware) (EventID: 5008) (User: )
Description: %%860 engine has been terminated due to an unexpected error.

 Failure Type: %%831

 Exception code:

 Resource: file:C:\Users\Marcia\AppData\Local\Temp\SkypeSetup.exe

Error: (10/03/2015 05:02:56 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Search service hung on starting.

Error: (10/03/2015 05:02:46 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Security Center service terminated with the following error:
%%16389

Error: (10/03/2015 05:00:45 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (10/03/2015 04:58:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Software Protection service failed to start due to the following error:
%%1053

Error: (10/03/2015 04:57:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect.

Error: (10/03/2015 04:55:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The LogMeIn Kernel Information Provider service failed to start due to the following error:
%%3

Error: (10/03/2015 04:55:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The GoToMyPC service failed to start due to the following error:
%%2

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU P8700 @ 2.53GHz
Percentage of memory in use: 58%
Total physical RAM: 3535.9 MB
Available physical RAM: 1467.95 MB
Total Virtual: 7070.12 MB
Available Virtual: 4983.53 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:231.95 GB) (Free:11.82 GB) NTFS
Drive e: (RECOVERY) (Fixed) (Total:0.73 GB) (Free:0.53 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive f: (USB-4GB) (Removable) (Total:3.81 GB) (Free:3.81 GB) FAT32
Drive s: (Offline) (Network) (Total:231.95 GB) (Free:11.82 GB) CSC-CACHE

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 28000000)
Partition 1: (Not Active) - (Size=212 MB) - (Type=DE)
Partition 2: (Active) - (Size=750 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=231.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 3.8 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=3.8 GB) - (Type=0C)

==================== End of Addition.txt ============================

 

Post #2
Welcome

Running from C:\Users\[removed]\Downloads

It's best we move Farbar's to desktop.

Please go to your downloads folder, locate Farbar Recovery Scan Tool, right click and select CUT
Go to an open spot on your desktop, right click and select PASTE
You should now have Farbar Recovery Scan Tool on your desktop.


Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)


[external image: FRSTfix.JPG]

 

start
CreateRestorePoint:
CloseProcesses:
HKLM\…\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/w…ADYANAAwADkANwA(the data entry has 259 more characters).
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess?
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\…\InprocServer32: [Default-pngfilt] <==== ATTENTION
AppInit_DLLs: AVGRSSTX.DLL => No File
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=ABnxyXNc1dsR9H_YlZYmszWPYPs?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> {DBA39C0B-2491-414F-8FEA-9687A481D756} URL =
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-06-23] (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-2950318581-11869349-2311908374-1001 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
C:\Users\Marcia\AppData\Local\Temp\Abspdf.exe
C:\Users\Marcia\AppData\Local\Temp\acfpdfu.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuamd64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfui.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuia64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuiamd64.dll
C:\Users\Marcia\AppData\Local\Temp\acfpdfuiia64.dll
C:\Users\Marcia\AppData\Local\Temp\cdintf.dll
C:\Users\Marcia\AppData\Local\Temp\CSIF155.exe
C:\Users\Marcia\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpo9zdz2.dll
C:\Users\Marcia\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Marcia\AppData\Local\Temp\installutilities.dll
C:\Users\Marcia\AppData\Local\Temp\IPx86_1033.exe
C:\Users\Marcia\AppData\Local\Temp\ITPx86_1033.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u20-windows-i586-iftw-rv.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Marcia\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Marcia\AppData\Local\Temp\MSIZAP.EXE
C:\Users\Marcia\AppData\Local\Temp\PDFPRT400.exe
C:\Users\Marcia\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Marcia\AppData\Local\Temp\stlport_r50.dll
C:\Users\Marcia\AppData\Local\Temp\uninstall.exe
C:\Users\Marcia\AppData\Local\Temp\vn9mda7z.dll
C:\Users\Marcia\AppData\Local\Temp\xmllite.dll
C:\Users\Marcia\AppData\Local\Temp\_isADEB.exe
C:\Users\Test\AppData\Local\Temp\Intuit.Spc.Map.EntitlementClient.Install.dll
C:\Users\Test\AppData\Local\Temp\MSIZAP.EXE
C:\Users\Test\AppData\Local\Temp\qbinstal.dll
C:\Users\Test\AppData\Local\Temp\stlport_r50.dll
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.135\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{078759D3-423B-48AD-AB6A-5638C2884DBE}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{078C5F0B-8AEE-46B1-ABB6-EFE6924DD707}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.99\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0997898B-0713-11D2-A4AA-00C04F8EEB3E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0DDC5AA7-2EA2-4FBB-9EB7-7EE250B11B5A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.57\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.25.5\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{10E2414A-EC59-49D2-BC51-5ADD2C36FEBC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1164C69B-F71B-4B93-82F9-43151801E309}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{14074E0B-7216-4862-96E6-53CADA442A56}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.27.5\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1704815D-0A03-44ff-8646-1AE1FE84E313}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2008\qbw32.exe => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1B3210AF-E236-46D4-83EF-6421F2FF543C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1C0F439D-7C29-4BDE-8952-4EEB6A49E048}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1C1800C1-3258-44C2-BE80-3DEADB6C5E39}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1E78DD72-771E-42BF-8B4B-363CEB18E07B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.69\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{22664BE2-0806-4BA4-8643-DE40C9149176}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.2.183.39\goopdate.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{2A9EBDB5-0600-4E8C-B910-4001BEB2DD8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30276B4F-F25C-457C-A4B7-08574F8EA528}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F391-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F499-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30C3B080-30FB-11D0-B724-00AA006C1A01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{33337270-F789-11CE-86F8-0020AFD8C6DB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{349D777D-F7A2-4AAE-967F-A54F05A7FF3B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBFinder.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Marcia\AppData\Local\Google\Update\1.3.23.9\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58721-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\COMObjectFactory.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58742-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58743-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{38F58744-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{3E1A2BBD-5707-4646-B268-518B997DC94D}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2008\qbw32.exe => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{42AEDC87-2188-41FD-B9A3-0C966FEABEC1}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2950318581-11869349-2311908374-1001_Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InprocServer32 -> no filepath
HKU\S-1-5-21-2950318581-11869349-2311908374-1001\Software\Classes\.exe: => <===== ATTENTION
EmptyTemp:
End


Open FRST/FRST64 and press the > Fix < button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~~~~~~~~~~~

- Save ALL Tools to your Desktop-

All tools that I have you download should be placed on the desktop unless otherwise stated. If you are familiar with how to save files to the desktop then you can skip this step.

Since you are continuing with this step then I assume you are unfamiliar with saving files to your desktop. As a result it's easiest if you configure your browser(s) to download any tools to the desktop by default. Please use the appropriate instructions below depending on the browser you are using.
[external image: Chrome.JPG]Google Chrome - Click the "Customize and control Google Chrome" button in the upper right-corner of the browser.[external image: Settings.JPG] Choose Settings. at the bottom of the screen click the
"Show advanced settings…" link. Scroll down to find the Downloads section and click the Change… button. Select your desktop and click OK.
[external image: Firefox.JPG]Mozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser. [external image: Settings.JPG] Choose Options. In the downloads section, click the Browse button, click on the Desktop folder
and the click the "Select Folder" button. Click OK to get out of the Options menu.
[external image: IE.jpg]Internet Explorer - Click the Tools menu in the upper right-corner of the browser. [external image: Tools.JPG] Select View downloads. Select the Options link in the lower left of the window. Click Browse and
select the Desktop and then choose the Select Folder button. Click OK to get out of the download options screen and then click Close to get out of the View Downloads screen.
NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.

~~~~~~~~~~~~~~~`

[external image: BY4dvz9.png]AdwCleaner
  • Please download AdwCleaner and save the file to your Desktop.
  • Right-Click AdwCleaner.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
  • Follow the prompts.
  • Click Scan.
  • Upon completion, click Report. A log (AdwCleaner[SX].txt) will open. Briefly check the log for anything you know to be legitimate.
  • Ensure anything you know to be legitimate does not have a checkmark, and click Clean.
  • Follow the prompts and allow your computer to reboot.
  • After rebooting, a log (AdwCleaner[SX].txt) will open. Copy the contents of the log and paste in your next reply.
– File and registry key backups are made for anything removed using this tool. Should a legitimate entry be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the entry. Please do not overly concern yourself with the contents of AdwCleaner[R0].txt.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


[external image: thisisujrt.gif]
Please download Junkware Removal Tool
or from here http://downloads.malwarebytes.org/file/jrt
to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
~~~~~~~~~~~~~~~~``
please post
Fixlog.txt
AdwCleaner[CX].txt
JRT.txt
Post #4

Hi:

 

Thank you for your prompt reply. I got pulled out of this because someone else took over. They were able to resolve the issue so this topic can be closed; however, I want to thank you so very much for being there to help.

 

Cordially,

 

Clairedog (Harold)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI