Additional scan result of Farbar Recovery Scan Tool (x86) Version:18-10-2015 Ran by Daniel Keeney APR (2015-10-19 22:04:45) Running from C:\Users\Daniel Keeney APR\Downloads Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) (2009-03-10 15:46:57) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3761002974-3346382329-3765931107-500 - Administrator - Disabled) Daniel Keeney APR (S-1-5-21-3761002974-3346382329-3765931107-1000 - Administrator - Enabled) => C:\Users\Daniel Keeney APR Guest (S-1-5-21-3761002974-3346382329-3765931107-501 - Limited - Disabled) Sonos (S-1-5-21-3761002974-3346382329-3765931107-1004 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat 9 Standard - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-BA7E-000000000004}{AC76BA86-1033-F400-BA7E-000000000004}) (Version: 9.5.5 - Adobe Systems) Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM\...\{AC76BA86-1033-F400-BA7E-000000000004}_955) (Version: - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated) Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (HKLM\...\{FD423BBD-8095-D342-F496-59D7C22FD581}) (Version: 3.0.778.0 - ATI Technologies, Inc.) ATI Catalyst Registration (Version: 3.00.0000 - ATI Technologies Inc.) Hidden BitTorrent (HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\BitTorrent) (Version: 7.9.2.35704 - BitTorrent Inc.) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden Cisco WebEx Meetings (HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC) Citrix Online Launcher (HKLM\...\{AC7E7905-8C59-4806-A96D-30936A2B1FC5}) (Version: 1.0.168 - Citrix) Coby Media Manager (HKLM\...\{45C5421D-7A5E-4FE9-8F42-D98DF070E783}) (Version: 1.0.3624 - Coby) Dell Resource CD (HKLM\...\{42929F0F-CE14-47AF-9FC7-FF297A603021}) (Version: 1.10.0000 - Dell Inc.) Digital Photo Navigator 1.5 (HKLM\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version: - ) Dropbox (HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.) ffdshow [rev 3128] [2009-11-08] (HKLM\...\ffdshow_is1) (Version: 1.0 - ) Flash Player Pro V5.4 (HKLM\...\Flash Player Pro_is1) (Version: - FlashPlayerPro.com) Free DVD Creator version 2.0 (HKLM\...\Free DVD Creator (by minidvdsoft)_is1) (Version: 2.0 - www.minidvdsoft.com) Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.) Google Chrome Frame (HKLM\...\Google Chrome Frame) (Version: 32.0.1700.107 - Google Inc.) Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden HP Driver Diagnostics (HKLM\...\{0EC7C406-B592-4686-BAC1-AD29A85EAE6A}) (Version: 1.03.0005 - Hewlett-Packard Company) HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Officejet 6600 Basic Device Software (HKLM\...\{C4C4BECF-764C-406D-A1AD-F73611B0F668}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden HPOJ6600FWUpdateAlert (Version: 1.00.0000 - HP) Hidden IHA_MessageCenter (HKLM\...\{53C49C8D-DFB2-42B9-A7EF-0F9CA386CC13}) (Version: 1.8.17 - Verizon) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - ) Intel(R) PRO Network Connections Drivers (HKLM\...\PROSet) (Version: - ) Intel® Active Management Technology (HKLM\...\MESOL) (Version: - Intel Corporation) Intel® Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation) iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.) Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation) LastPass (uninstall only) (HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\LastPass) (Version: - LastPass) McAfee SecurityCenter (HKLM\...\MSC) (Version: 14.0.339 - McAfee, Inc.) McAfee SiteAdvisor (HKLM\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.283 - McAfee, Inc.) McAfee Virtual Technician (HKLM\...\{8F1A20DC-251D-47B0-91B7-DCA2523EE6C9}) (Version: 5.5.2.0 - McAfee, Inc.) Memeo AutoSync (HKLM\...\{75B7F766-7998-44d8-A202-F1EC76A121BA}) (Version: - Memeo Inc.) Memeo Instant Backup (HKLM\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7923 - Memeo Inc.) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM\...\{90A40409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-00CA-0000-0000-0000000FF1CE}_SMALLBUSINESSR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2010 Primary Interop Assemblies (HKLM\...\{90140000-1146-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1150 - Microsoft Corporation) Microsoft Office Live Meeting 2007 (HKLM\...\{EA710A0A-BF5D-433C-8EB5-D17DC54CC298}) (Version: 8.0.6362.201 - Microsoft Corporation) Microsoft Office Small Business 2007 (HKLM\...\SMALLBUSINESSR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) Mouse Suite for Desktop Computers (HKLM\...\{448E2D77-E504-4221-B2C2-93646B344729}) (Version: 2.50.020 - Dell) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) NETGEAR WNA1000M Wireless USB 2.0 Adapter (HKLM\...\InstallShield_{62F7B391-E2B2-4714-BBAA-A14E4FAAB95C}) (Version: 1.01.10 - NETGEAR) NETGEAR WNA1000M Wireless USB 2.0 Adapter (Version: 1.01.10 - NETGEAR) Hidden NetWaiting (HKLM\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.47 - BVRP Software, Inc) Nike+ Connect (HKLM\...\Nike+ Connect) (Version: 6.6.32 - Nike) OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.) PowerCinema NE for Everio (HKLM\...\{39CEE1F2-12B6-4C50-9131-04BFCA110578}) (Version: - ) PowerDirector Express (HKLM\...\{EDE721EC-870A-11D8-9D75-000129760D75}) (Version: - ) PowerProducer (HKLM\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 074303(3.7)_Vista_JVC - CyberLink Corporation) QuickBooks (Version: 24.0.4007.2403 - Intuit Inc.) Hidden QuickBooks Pro 2014 (HKLM\...\{4A21D17E-2FE8-42CD-88B7-ACF8E8860834}) (Version: 24.0.4001.2403 - Intuit Inc.) QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) RealPlayer (HKLM\...\RealPlayer 6.0) (Version: - RealNetworks) Roxio Activation Module (HKLM\...\{07159635-9DFE-4105-BFC0-2817DB540C68}) (Version: 1.0 - Roxio) Roxio Creator Audio (HKLM\...\{83FFCFC7-88C6-41C6-8752-958A45325C82}) (Version: 3.5.0 - Roxio) Roxio Creator Copy (HKLM\...\{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}) (Version: 3.5.0 - Roxio) Roxio Creator Data (HKLM\...\{0D397393-9B50-4C52-84D5-77E344289F87}) (Version: 3.5.0 - Roxio) Roxio Creator DE (HKLM\...\{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}) (Version: 3.5.0 - Roxio) Roxio Creator Tools (HKLM\...\{0394CDC8-FABD-4ED8-B104-03393876DFDF}) (Version: 3.5.0 - Roxio) Roxio Drag-to-Disc (HKLM\...\{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}) (Version: 9.1 - Roxio) Roxio Express Labeler 3 (HKLM\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 3.2.1 - Roxio) Roxio Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 6.0.0 - Roxio) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.) Seagate Dashboard (HKLM\...\{C3A11907-930D-41AC-A135-CC3B12F92011}) (Version: 1.1.0.1421 - Memeo Inc.) Shared C Run-time for x86 (Version: 10.0.0 - McAfee) Hidden Sonic CinePlayer Decoder Pack (HKLM\...\{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}) (Version: 4.2.0 - Sonic Solutions) Sonos Controller (HKLM\...\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 29.5.90191 - Sonos, Inc.) SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.5491 - Analog Devices) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1168 - SUPERAntiSpyware.com) SupportSoft Assisted Service (HKLM\...\{5A3F6A80-7913-475E-8B96-477A952CFA43}) (Version: 15 - SupportSoft) The Lord of the Rings FREE Trial (Version: 1.00.0000 - ATI Technologies Inc.) Hidden Trader's Little Helper 2.7.0 (HKLM\...\TradersLittleHelper_is1) (Version: 2.7.0 - Robert Hoffmann) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-00CA-0000-0000-0000000FF1CE}_SMALLBUSINESSR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Vegas Movie Studio Platinum 9.0 (HKLM\...\{F14F7FCF-6299-446A-A8F5-C5B791015692}) (Version: 9.0.55 - ) Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (HKLM\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) VLC media player 0.9.9 (HKLM\...\VLC media player) (Version: 0.9.9 - VideoLAN Team) Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.135\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{05EC5C13-D255-4592-9CCB-98615172F0D6}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.99\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{0ADF9C35-0D5E-4B75-88DD-B64868907E17}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{0C378864-D5C4-4D9C-854C-432E3BEC9CCB}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.25.5\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{123FAF7F-3FB1-4B8F-AD18-0047401D436A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.27.5\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{17764098-F985-44E2-93C3-DF9B49F1CC19}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{17E67D4A-23A1-40D8-A049-EE34C0AF756A}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{1B3210AF-E236-46D4-83EF-6421F2FF543C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{1E78DD72-771E-42BF-8B4B-363CEB18E07B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.69\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{22664BE2-0806-4BA4-8643-DE40C9149176}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{294E9835-D0F1-4815-8C52-3C08FBB1403E}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{2A9EBDB5-0600-4E8C-B910-4001BEB2DD8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\ProgramData\WebEx\WebEx\1224\atucfobj.dll (Cisco WebEx LLC) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{349D777D-F7A2-4AAE-967F-A54F05A7FF3B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBFinder.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.23.9\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{37A2FC00-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{37A2FC02-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{38F58721-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\COMObjectFactory.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{38F58742-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{38F58743-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{38F58744-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{3CDEA288-D759-4C3B-B07F-7AFBCC842D98}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{42C68651-1700-4750-A81F-A1F5110E0F66}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{4716D3CE-55DB-4D2A-818C-87D912895890}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{4774922A-8983-4ECC-94FD-7235F06F53A1}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{4844F3F7-2161-4AC4-B219-B3B4311782AA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{4A56F19E-9F50-4F43-93C8-050E44AA83A9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{4E5E74B5-8EB5-4859-A335-837EED412620}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{51240B37-45D0-413C-BAE0-D8F3ACDC15E6}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5249684A-D7A2-4DBE-94F4-B90923A7BC64}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5428A9ED-6CD8-11D6-9C8A-0001023DCAA2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{547C8F00-5567-4AE3-8BB0-CC3CE2AB9070}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{54BE6B6F-3056-470B-97E1-BB92E051B6C4}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{57D590F1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{596801D8-2C9D-4627-9C67-195CB81B655A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5A494E87-262C-4340-A539-2FAC0A85D935}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5B7331FA-8910-4748-A8A4-60B445041F28}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.28.1\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5E6F22B3-7DF6-4C64-8AD0-1A6CC1351085}\InprocServer32 -> C:\Program Files\Hp\Common\HPScripting.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{5ED8AC89-B2DE-476D-8EEA-E170B2FCB058}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{60178279-6D62-43AF-A336-77925651A4C6}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.145\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.123\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{6470DE80-1635-4B5D-93A3-3701CE148A79}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{64CB8178-1A77-4443-BE13-30BE889B99BB}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{684E4896-6EFC-4A3D-B967-6105894A6796}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{6B75345B-AA36-438A-BBE6-4078B4C6984D}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.153\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{70478C56-E77F-4134-B3E3-3B18EE036D71}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{738CD606-129D-45db-86D6-6C9739C750CA}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2009\qbw32.exe => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{7694F1CD-A55B-4B7C-8820-A90892EB4E9E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{784F2933-6BDD-4E5F-B1BA-A8D99B603649}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.28.13\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{7CB9D4F5-C492-42A4-93B1-3F7D6946470D}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{7D4CF499-32EC-4E8E-8714-7E74303869F0}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{7DBF8260-30AD-4D1B-876A-8032B87B809F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{828E5386-74CF-4019-B356-C857CD028A7D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{82CC31B3-53B4-4161-A4E9-6B4F1290A6C8}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{8572570D-12D9-4F2C-8BB8-EB8848178B94}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{8877F3CD-3C29-4E2D-B7DD-70B24DF4EBD1}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{8E590317-1329-11D1-B70B-00805F29CD16}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\QBW32.EXE (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{8FEDE364-AB37-4551-80C9-6D468E222AB2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.24.15\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{910E7ADE-7F75-402D-A4A6-BB1A82362FCA}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{93441C07-E57E-4086-B912-F323D741A9D8}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9986CC36-7FA8-4E9A-ADE1-E197FCC5484B}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F2-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F3-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F4-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F5-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F6-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9D9B61F7-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9E1DDDD2-0638-4607-B266-13FE69EDFFD3}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9E3A85FC-1E59-4C57-ACEA-17E7D61000F1}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.22.3\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.165\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A58C4EAB-2DB8-445E-9CAE-2AE197A5C708}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A63E42D0-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A63E42D2-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{A95845D8-8463-4605-B5FB-4F8CFBAC5C47}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{AA6A5B54-2ACF-4FDB-A82B-E505A5E0B65E}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{AAFBE339-5BEE-417C-BE98-218DA8512B43}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{AB049B11-607B-46C8-BBF7-F4D6AF301046}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{AB237044-8A3B-42BB-9EE1-9BFA6721D9ED}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{AF5E0A13-CEAB-47CE-991D-77E82CD1BF3F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{B10BFAC3-EFF1-40D9-ADA0-BEBE037C24CA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{B2CD4730-67E7-401C-A2CB-D74715E05FA4}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{B5201019-B9A8-411C-A7AC-CEA856A63C00}\InprocServer32 -> C:\Program Files\Hp\Common\HPScripting.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{B66F2BF1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{B9C13CD0-5A97-4C6B-8A50-7638020E2462}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{BC2971B9-2A4F-44C8-8D7F-04E027544828}\InprocServer32 -> C:\Program Files\Hp\Common\HPScripting.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{BCD594EA-15C3-4FD8-B92B-114BB9694537}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBCtrIPMDS2.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{BE65189A-4770-47A0-9B7B-68827DB1C317}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{BF931895-AF82-467A-8819-917C6EE2D1F3}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.26.9\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.115\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C70D0641-DDE1-4FD7-A4D4-DA187B80741D}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{C94188F6-0F9F-46B3-8B78-D71907BD8B77}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{CBEF1FB5-78FF-4B14-9B0F-275493FB589C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{CDAF9CEC-F3EC-4B22-ABA3-9726713560F8}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{CE18240D-F3F8-43AE-9EA0-A0DC85A95375}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{CF6866F9-B67C-4B24-9957-F91E91E788DC}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.25.11\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D057CD8F-1469-4A41-B24C-7EED6B1DDCD2}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D14FD6B3-6A9F-4537-9460-07B836707127}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D4A12AAF-E15E-470B-A6B6-63032186F91F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9B9C060-0954-11D3-9E07-00104BD2BE34}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSource.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6F81-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6F84-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6F87-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6FA1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6FA6-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6FB2-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\StorageClasses.dll (Intuit, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{D9BC6FC1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DA654E0C-E75D-4507-8AC2-71698C5B5C93}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\QBW32.EXE (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.65\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DC4F9DA0-DB05-4BB0-8FB2-03A80FE98772}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DCB2B478-EFF6-48F6-B718-13E98876854E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DE233AFF-8BD5-457E-B7F0-702DBEA5A828}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DF1F1C17-6A29-45FB-A3C6-9825908E062E}\InprocServer32 -> C:\Program Files\Hp\Common\RulesEngine.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{DFD0AF10-B86C-4AF3-B609-1348D513E565}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E12DA4F2-BDFB-4EAD-B12F-2725251FA6B0}\InprocServer32 -> C:\Program Files\Hp\Common\HPeDiag.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E1A173E1-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E1A173E3-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E6E4DF8B-17CE-43ED-B2C7-2CE10457552D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E7D2D0F6-B754-438D-B5C9-BF848D311A0F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{E975F61C-2C2B-4FE8-A4CD-24C52969CE12}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{EADA914E-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{EAEF733D-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.22.5\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{F2C593CC-74B2-4F71-8556-DD4D426D0409}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{F9EF917A-E55E-4242-B205-E778395AC313}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FA9C5110-071C-4964-9DD0-610806FF0F81}\InprocServer32 -> C:\Program Files\Hp\Common\HPDeviceDetection.dll (Hewlett-Packard) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FAC93D42-FFC2-11d1-9DEB-0008C7A08EBA}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2014\QBW32.EXE (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB17915F-06D1-4214-A902-CC5EE05186E9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB359C2A-6927-4AD7-8F1B-B6472CA7CDE7}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.21.111\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Google\Update\1.3.24.7\psuser.dll => No File CustomCLSID: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.) ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 05:23 - 2006-09-18 16:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {19DC287C-7F03-4391-849E-C05C9E4B4842} - System32\Tasks\GoogleUpdateTaskMachineUA1d0bf2eb1d3e840 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {22F90C4A-ADE2-432E-B793-0714D9E2C260} - System32\Tasks\GoogleUpdateTaskMachineCore1cfebd4a12b0920 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {27BF7985-151F-4B66-BE70-12BAAD321C19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated) Task: {2E6E4636-F0E6-4D6B-9F1E-B05B53FEDD27} - System32\Tasks\GoogleUpdateTaskMachineCore1cf4da81faeca0 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {5A097DC0-0342-4EB5-8DCF-2553A12C9C76} - System32\Tasks\GoogleUpdateTaskMachineUA1cf6ad5b16cd29 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {6B289F58-9F04-4E44-8EDE-370AEC5FD16F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3761002974-3346382329-3765931107-1000Core => C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {7043F09A-29DD-44E4-AF11-C2FC0DC5A0E5} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3761002974-3346382329-3765931107-1000UA1d0c32219abd404 => C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {70F7FB9D-6D63-4AA2-ACC4-6341A4D534B3} - System32\Tasks\GoogleUpdateTaskMachineUA1d0918a723b82d3 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {7F743DD3-A58C-4EE1-994F-A625B28842C4} - System32\Tasks\IHUninstallTrackingTASK => CMD Task: {94F315A0-3F6F-47D4-A815-03FF4822A436} - System32\Tasks\GoogleUpdateTaskMachineUA1cfebd4a1d1a960 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {9E5BAC34-C97C-457B-AE34-103C8B620876} - System32\Tasks\GoogleUpdateTaskMachineCore1d042ed498ac084 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {B48807D5-938A-4D7B-88EB-A7770B5B4BAF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {D798DB21-8F83-4271-99F9-3D4499E7C2A6} - System32\Tasks\GoogleUpdateTaskMachineCore1d0918a7150176a => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {E21981B4-3023-4EF9-9142-905DDC9FD2BC} - System32\Tasks\GoogleUpdateTaskMachineUA1d000116356fc8f => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {ECE70444-6D39-468B-B1D1-36362B5CE3E4} - System32\Tasks\GoogleUpdateTaskMachineUA1d042ed4a1414c4 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {F593221B-3C68-41D6-8731-E0D2BE3F9924} - System32\Tasks\GoogleUpdateTaskMachineCore1d0001162d1af1f => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3761002974-3346382329-3765931107-1000Core.job => C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3761002974-3346382329-3765931107-1000UA1d0c32219abd404.job => C:\Users\Daniel Keeney APR\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf4da81faeca0.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfebd4a12b0920.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0001162d1af1f.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d042ed498ac084.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0918a7150176a.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf6ad5b16cd29.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfebd4a1d1a960.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d000116356fc8f.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d042ed4a1414c4.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0918a723b82d3.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0bf2eb1d3e840.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2009-03-10 14:45 - 2009-02-13 12:44 - 00117264 _____ () c:\Program Files\McAfee\SiteAdvisor\apengine.dll 2009-03-10 14:45 - 2009-02-13 12:44 - 00071696 _____ () c:\Program Files\McAfee\SiteAdvisor\mcfrmwk.dll 2009-03-10 14:45 - 2009-02-13 12:44 - 00207376 _____ () c:\Program Files\McAfee\SiteAdvisor\cntscan.dll 2009-04-03 08:47 - 2006-12-19 17:23 - 00272024 ____N () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2007-07-23 17:04 - 2007-07-23 17:04 - 00068080 _____ () C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\DLAAPI_W.DLL 2009-04-03 11:30 - 2008-09-16 20:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll 2011-06-30 23:23 - 2011-06-30 23:23 - 00167936 _____ () C:\Program Files\NETGEAR\WNA1000M\WlanWpsSvc.exe 2010-05-27 11:24 - 2011-11-10 02:11 - 00037376 _____ () C:\Windows\system32\atitmpxx.dll 2009-04-03 08:59 - 2007-03-29 15:47 - 00012288 ____N () C:\Program Files\CyberLink\PCM4Everio\Kernel\common\CLEverioDetector.dll 2012-01-04 19:32 - 2012-01-04 19:32 - 00504064 _____ () C:\Program Files\NETGEAR\WNA1000M\WNA1000M.exe 2011-12-26 14:48 - 2011-12-26 14:48 - 00237568 _____ () C:\Program Files\NETGEAR\WNA1000M\WTmpl.dll 2011-12-26 14:43 - 2011-12-26 14:43 - 00327680 _____ () C:\Program Files\NETGEAR\WNA1000M\XParser.dll 2011-12-26 14:47 - 2011-12-26 14:47 - 00290816 _____ () C:\Program Files\NETGEAR\WNA1000M\WDialog.dll 2011-12-26 14:44 - 2011-12-26 14:44 - 00512000 _____ () C:\Program Files\NETGEAR\WNA1000M\WCtrls.dll 2011-12-13 11:18 - 2011-12-13 11:18 - 00286720 _____ () C:\Program Files\NETGEAR\WNA1000M\WCommObj.dll 2011-12-26 14:45 - 2011-12-26 14:45 - 00319488 _____ () C:\Program Files\NETGEAR\WNA1000M\WDraw.dll 2011-12-26 14:54 - 2011-12-26 14:54 - 00262144 _____ () C:\Program Files\NETGEAR\WNA1000M\GDIpProc.dll 2011-12-26 14:46 - 2011-12-26 14:46 - 00393216 _____ () C:\Program Files\NETGEAR\WNA1000M\WWnd.dll 2011-12-13 12:10 - 2011-12-13 12:10 - 00413696 _____ () C:\Program Files\NETGEAR\WNA1000M\WlanDll.dll 2011-12-13 11:18 - 2011-12-13 11:18 - 00307200 _____ () C:\Program Files\NETGEAR\WNA1000M\WConn.dll 2014-06-26 12:54 - 2014-06-26 12:54 - 00623432 _____ () C:\Program Files\Intuit\QuickBooks 2014\boost_regex-vc100-mt-1_47.dll 2014-06-26 12:56 - 2014-06-26 12:56 - 00021320 _____ () C:\Program Files\Intuit\QuickBooks 2014\QBCompressor.dll 2013-08-19 11:03 - 2013-08-19 11:03 - 00059904 _____ () C:\Program Files\Intuit\QuickBooks 2014\zlib1.dll 2014-06-26 12:56 - 2014-06-26 12:56 - 00149320 _____ () C:\Program Files\Intuit\QuickBooks 2014\QBMAPILibrary.dll 2014-06-26 12:54 - 2014-06-26 12:54 - 00247112 _____ () C:\Program Files\Intuit\QuickBooks 2014\boost_serialization-vc100-mt-1_47.dll 2014-06-26 12:54 - 2014-06-26 12:54 - 00623944 _____ () C:\Program Files\Intuit\QuickBooks 2014\FtuEngine.dll 2014-06-26 12:53 - 2014-06-26 12:53 - 00582472 _____ () C:\Program Files\Intuit\QuickBooks 2014\BackupLib.dll 2014-06-26 12:56 - 2014-06-26 12:56 - 00142664 _____ () C:\Program Files\Intuit\QuickBooks 2014\QBProActiveCore.dll 2014-06-26 12:54 - 2014-06-26 12:54 - 00791880 _____ () C:\Program Files\Intuit\QuickBooks 2014\FeaturesBridge.dll 2014-06-26 12:55 - 2014-06-26 12:55 - 00043848 _____ () C:\Program Files\Intuit\QuickBooks 2014\mbpopup.dll 2014-06-26 12:55 - 2014-06-26 12:55 - 00087368 _____ () C:\Program Files\Intuit\QuickBooks 2014\IPDWidgetBridge.dll 2014-06-26 12:55 - 2014-06-26 12:55 - 00104264 _____ () C:\Program Files\Intuit\QuickBooks 2014\IPDWidgetInterop.dll 2014-06-26 12:57 - 2014-06-26 12:57 - 00501576 _____ () C:\Program Files\Intuit\QuickBooks 2014\SyncManagerUtils.dll 2014-06-26 12:56 - 2014-06-26 12:56 - 00113480 _____ () C:\Program Files\Intuit\QuickBooks 2014\QB2WPFBridge.dll 2014-06-26 12:56 - 2014-06-26 12:56 - 00129352 _____ () C:\Program Files\Intuit\QuickBooks 2014\ReportBridge.dll 2014-06-26 12:57 - 2014-06-26 12:57 - 00115016 _____ () C:\Program Files\Intuit\QuickBooks 2014\Webification.dll 2014-06-26 12:54 - 2014-06-26 12:54 - 00060232 _____ () C:\Program Files\Intuit\QuickBooks 2014\htmlhelper.dll 2015-10-19 13:35 - 2015-10-19 13:35 - 00071168 _____ () c:\Users\Daniel Keeney APR\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3erf3o.dll 2010-04-16 14:20 - 2010-04-16 14:20 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-05-27 12:40 - 2010-05-27 12:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2015-10-02 14:52 - 2015-10-19 17:32 - 00612576 _____ () C:\Program Files\Common Files\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\updater.exe 2015-10-02 14:43 - 2015-10-19 17:38 - 01045728 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugincontainer.exe 2015-10-19 10:50 - 2015-10-19 10:50 - 01203936 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\6\plugin.exe 2015-10-19 14:40 - 2015-10-19 14:40 - 01002208 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\10\plugin.exe 2015-10-19 17:39 - 2015-10-19 17:39 - 01295072 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\5\plugin.exe 2015-10-19 18:44 - 2015-10-19 18:44 - 00989920 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\7\plugin.exe 2015-10-19 19:44 - 2015-10-19 19:44 - 01267424 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\3\plugin.exe 2015-10-19 20:44 - 2015-10-19 20:44 - 01255648 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\8\plugin.exe 2009-02-26 13:46 - 2009-02-26 13:46 - 00064344 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll 2010-04-15 18:04 - 2013-05-08 02:57 - 02666496 _____ () C:\Program Files\Adobe\Acrobat 9.0\PDFMaker\Common\AdobePDFMakerX.dll 2011-06-22 11:46 - 2011-06-22 11:46 - 00434016 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll 2015-07-14 18:20 - 2015-07-14 18:20 - 00756376 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL 2015-10-19 21:44 - 2015-10-19 21:44 - 01720544 _____ () C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656\plugins\2\plugin.exe 2014-04-15 17:43 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Daniel Keeney APR\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll 2014-04-15 17:43 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Daniel Keeney APR\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll 2015-10-17 15:56 - 2015-10-15 13:20 - 16493256 _____ () C:\Users\Daniel Keeney APR\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:888AFB86 AlternateDataStreams: C:\Users\Daniel Keeney APR\Desktop\DPK-Public-Relations-2013-Schedule-C.pdf:com.dropbox.attributes ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\internet -> internet IE trusted site: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\intuit.com -> hxxps://ttlc.intuit.com IE trusted site: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\mcafee.com -> hxxp://mcafee.com IE trusted site: HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\...\mcafee.com -> hxxps://mcafee.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3761002974-3346382329-3765931107-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Daniel Keeney APR\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg DNS Servers: 75.75.75.75 - 75.75.76.76 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [{E0CAC589-89D7-45C6-8595-77A1F1035E28}] => (Allow) C:\Program Files\Common Files\Mcafee\MNA\McNaSvc.exe FirewallRules: [{5377316C-797C-4A4B-BE6F-FBA4FAD92840}] => (Allow) C:\Program Files\CyberLink\PowerDirector Express\PDX.EXE FirewallRules: [{B212A8A9-4A88-47E6-A34C-2D97D8C4138E}] => (Allow) C:\Program Files\DNA\btdna.exe FirewallRules: [{4A3083F4-E4FA-4802-A4CD-A6A00A68ABB6}] => (Allow) C:\Program Files\DNA\btdna.exe FirewallRules: [{5D238C0D-1992-4957-A9C0-B639484BCEB0}] => (Allow) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe FirewallRules: [TCP Query User{F89CD39D-5C69-4EC7-ACD2-A38FE378808E}C:\users\daniel keeney apr\program files\dna\btdna.exe] => (Block) C:\users\daniel keeney apr\program files\dna\btdna.exe FirewallRules: [UDP Query User{FB018D6A-4E31-4A51-A774-02A0C4262D9A}C:\users\daniel keeney apr\program files\dna\btdna.exe] => (Block) C:\users\daniel keeney apr\program files\dna\btdna.exe FirewallRules: [{6F5A7AAA-3980-41C4-97A4-236296D2DE73}] => (Allow) LPort=80 FirewallRules: [{E18C4433-B755-458C-839C-C3240A1DF99D}] => (Allow) LPort=80 FirewallRules: [{D16CB753-378B-4FE8-BDD0-B54462220ED4}] => (Allow) LPort=80 FirewallRules: [{8BF5C969-B84C-4A62-B5CF-16AC08D020B4}] => (Allow) C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\HipServAgent.exe FirewallRules: [{BAC2A4D6-4ABB-4304-92AD-60C2BA17194E}] => (Allow) LPort=50000 FirewallRules: [{27F9AAD0-1E65-43E1-99BC-E523662326FA}] => (Allow) LPort=50000 FirewallRules: [{3EF6FC32-5A4B-4470-8AED-EEDD380388CD}] => (Allow) C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{092D0743-D271-4C3C-A9EF-EE389DB777AF}] => (Allow) C:\Users\Daniel Keeney APR\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{71E28BE7-759F-47C9-A3FD-C3E15685089B}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe FirewallRules: [{B3DB6FBD-9E90-43A6-A976-B5560DEACAEB}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe FirewallRules: [{08CA4F5E-6C53-4C79-BB7A-824824E2EFB0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BBAE5CD1-616E-4B1C-A65A-7D44B6054173}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{6A4B27C8-F2AE-412B-899A-146276A28EB7}] => (Allow) C:\Program Files\HP\HP Officejet 6600\bin\FaxApplications.exe FirewallRules: [{7E0E0BD9-C4B4-4449-B615-12941B395F53}] => (Allow) C:\Program Files\HP\HP Officejet 6600\bin\DigitalWizards.exe FirewallRules: [{E654AA78-9E7D-4A93-920C-26FD07E7AAE5}] => (Allow) C:\Program Files\HP\HP Officejet 6600\bin\SendAFax.exe FirewallRules: [{9D92FE7E-2F5F-44F5-8806-C310B8DBBAFC}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\DeviceSetup.exe FirewallRules: [{354961E1-F090-4BB3-BC96-39A69F23D171}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicator.exe FirewallRules: [{56CC6C35-82D6-461D-BFE2-D2EDB0658425}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{A251DFB6-04F3-4936-896A-1821713C9403}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{7ADF7A75-971E-40D5-8675-C71AEE42E840}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{D8EB8501-AAE5-485B-9A95-F49675BD5BEF}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{B3375224-0C65-45D2-B58C-430C510E10D4}] => (Allow) C:\Users\Daniel Keeney APR\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{046DDE63-F318-4FA6-AC63-7FAE60BD2999}] => (Allow) C:\Users\Daniel Keeney APR\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{C66EC1A0-060F-4775-A8C3-ED79B1C22C63}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{A921ED01-90FC-4C97-9C79-C16CAE5030AE}] => (Allow) C:\Program Files\Sonos\Sonos.exe FirewallRules: [{63E9815B-3A8C-4019-B459-04142176A679}] => (Allow) C:\Program Files\Sonos\Sonos.exe FirewallRules: [{994F50B5-C727-4512-9F90-B56AF5B57DBB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files\BitTorrent\bittorrent.exe] => Enabled:BitTorrent ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/19/2015 05:59:15 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) Error: (10/19/2015 05:59:15 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) Error: (10/19/2015 05:45:06 PM) (Source: QuickBooks) (EventID: 4) (User: ) Description: An unexpected error has occured in "QuickBooks Pro 2014": DBConnPool::HandleConnectionError errorCode:-6069, dbCode:-103 from file:'.\.\src\connpool.cpp' at line 1038 from function:'DBMgr::DBConnPool::init' Error: (10/19/2015 05:45:06 PM) (Source: QuickBooks) (EventID: 4) (User: ) Description: An unexpected error has occured in "QuickBooks Pro 2014": Connection String:CON=QBConnectionPool-Probe-QB_data_engine_24; ;DBF=C:\Users\Daniel Keeney APR\DPK Public Relations_2013_08_25.QBW;ENG=QB_data_engine_24;DBN=241f79d09029415d87b629021c2cb2ae Error: (10/19/2015 05:45:06 PM) (Source: QuickBooks) (EventID: 4) (User: ) Description: An unexpected error has occured in "QuickBooks Pro 2014": Connection Error:Invalid user ID or password Error: (10/19/2015 02:51:22 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program mcuicnt.exe version 7.0.232.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: c48 Start Time: 01d10a9c7df3af80 Termination Time: 18660 Error: (10/19/2015 01:40:52 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application VzDetectAgent.exe, version 2.0.2.20, time stamp 0x54c7de5a, faulting module VzDetectAgent.exe, version 2.0.2.20, time stamp 0x54c7de5a, exception code 0x40000015, fault offset 0x00115b73, process id 0xdf0, application start time 0xVzDetectAgent.exe0. Error: (10/19/2015 01:32:42 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/19/2015 01:31:54 PM) (Source: Intel(R) AMT) (EventID: 2002) (User: ) Description: [UNS] Failed to subscribe to local Intel(R) AMT. Error: (10/19/2015 11:25:16 AM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) System errors: ============= Error: (10/19/2015 01:36:32 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {209500FC-6B45-4693-8871-6296C4843751} Error: (10/19/2015 01:33:56 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Service Mgr ResultsHub Error: (10/19/2015 01:31:30 PM) (Source: HTTP) (EventID: 15021) (User: ) Description: \Device\Http\ReqQueue0.0.0.0:4482 Error: (10/19/2015 01:28:53 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {9E14B23B-5D8A-447F-B962-6D6D6897861E} Error: (10/19/2015 11:25:34 AM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWFailureCommand%%5 Error: (10/19/2015 11:25:24 AM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWStart%%5 Error: (10/19/2015 11:17:17 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Service Mgr ResultsHub Error: (10/19/2015 11:15:21 AM) (Source: HTTP) (EventID: 15021) (User: ) Description: \Device\Http\ReqQueue0.0.0.0:4482 Error: (10/19/2015 10:57:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWFailureCommand%%5 Error: (10/19/2015 10:52:52 AM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: ScRegSetValueExWStart%%5 CodeIntegrity: =================================== Date: 2015-10-04 17:50:10.141 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-04 17:50:10.110 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-14 10:44:45.239 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-14 10:44:45.234 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-14 10:42:42.574 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-09-14 10:42:42.567 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-06-06 13:56:00.377 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-06-06 13:56:00.359 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-06-06 13:55:00.673 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. Date: 2015-06-06 13:55:00.669 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz Percentage of memory in use: 73% Total physical RAM: 3324.7 MB Available physical RAM: 892.56 MB Total Virtual: 6841.38 MB Available Virtual: 3363.75 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:230.71 GB) (Free:94.24 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (RECOVERY) (Fixed) (Total:2 GB) (Free:1.14 GB) NTFS Drive g: (FreeAgent GoFlex Drive) (Fixed) (Total:1397.26 GB) (Free:609.8 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.8 GB) (Disk ID: 70000000) Partition 1: (Not Active) - (Size=125 MB) - (Type=DE) Partition 2: (Not Active) - (Size=2 GB) - (Type=07 NTFS) Partition 3: (Active) - (Size=230.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 1397.3 GB) (Disk ID: 97587A7D) Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================