Jump to content

Welcome Guest to Geeks to Go - Register now for FREE
Geeks To Go is a helpful hub, where thousands of friendly volunteers serve up answers and support. Get free advice from the experts. Feel free to browse the site as a guest. However, you must log in to reply to existing topics or start a new topic of your own, and enjoy all this forum has to offer. Additionally, if you can assist another member by sharing your knowledge, please post a reply! Best of all - Registration and all assistance, is FREE! Learn more about How it Works. Infected? Malware Cleaning Guide. What are you waiting for?
Create an Account Login to Account

Frequent freezing with Firefox problems.


  • Please log in to reply

#1
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
Hi,

I'm helping my girlfriend with her computer using Teamviewer. She's had terrible sluggishness, frequent freezing, Firefox with one tab open sucking 100% of CPU usage, and frequently having to restart Firefox.


OTL logfile created on: 06/06/2013 5:48:50 AM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\BooHoo\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16576)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: MM/dd/yyyy

3.22 Gb Total Physical Memory | 1.29 Gb Available Physical Memory | 40.16% Memory free
6.43 Gb Paging File | 3.22 Gb Available in Paging File | 50.09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 500.47 Gb Total Space | 21.30 Gb Free Space | 4.26% Space Free | Partition Type: NTFS
Drive G: | 9.77 Gb Total Space | 9.67 Gb Free Space | 99.00% Space Free | Partition Type: NTFS
Drive I: | 244.14 Gb Total Space | 0.66 Gb Free Space | 0.27% Space Free | Partition Type: NTFS
Drive L: | 85.18 Gb Total Space | 36.08 Gb Free Space | 42.35% Space Free | Partition Type: NTFS

Computer Name: BOOHOO-PC | User Name: BooHoo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/06/06 04:59:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\BooHoo\Desktop\OTL.exe
PRC - [2013/05/18 20:12:27 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/05/15 05:38:18 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
PRC - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/23 08:48:17 | 010,244,448 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer.exe
PRC - [2013/04/23 08:48:17 | 004,171,104 | ---- | M] (TeamViewer GmbH) -- c:\Program Files\TeamViewer\Version8\TeamViewer_Desktop.exe
PRC - [2013/04/23 08:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013/04/23 08:40:59 | 000,193,888 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\tv_w32.exe
PRC - [2013/04/16 16:10:44 | 019,662,744 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013/03/27 12:52:12 | 003,020,768 | ---- | M] () -- C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
PRC - [2013/03/27 12:52:08 | 001,376,224 | ---- | M] () -- C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
PRC - [2013/03/27 12:18:37 | 003,300,320 | ---- | M] (GfK) -- C:\Program Files\GfKLSPService\GfKLspService.exe
PRC - [2013/03/27 12:18:35 | 000,058,848 | ---- | M] () -- C:\Program Files\GfKLSPService\GfK-WatchDog.exe
PRC - [2013/03/18 03:25:46 | 001,236,336 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe
PRC - [2013/03/18 03:25:44 | 018,828,128 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Ad-Aware Antivirus\AdAware.exe
PRC - [2013/02/21 16:18:42 | 000,140,880 | ---- | M] (Ipsos) -- C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusService.exe
PRC - [2013/02/21 16:18:42 | 000,064,592 | ---- | M] (Ipsos) -- C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusNet.exe
PRC - [2013/02/15 01:18:52 | 000,109,784 | ---- | M] (Siber Systems) -- C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
PRC - [2013/02/13 03:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2013/01/31 16:11:58 | 000,542,632 | ---- | M] (Lavasoft) -- C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
PRC - [2012/12/18 15:28:26 | 000,825,560 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
PRC - [2012/12/16 12:25:20 | 000,545,552 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieCtrl.exe
PRC - [2012/12/16 12:25:18 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2012/11/23 03:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012/11/22 11:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012/10/19 15:51:08 | 000,395,200 | ---- | M] (Eastman Kodak Company) -- C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
PRC - [2012/10/15 12:58:24 | 002,844,608 | ---- | M] (Eastman Kodak Company) -- C:\Program Files\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
PRC - [2012/10/15 12:58:22 | 000,779,200 | ---- | M] (Eastman Kodak Company) -- C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
PRC - [2012/10/04 15:57:58 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2012/09/20 05:39:12 | 003,677,000 | ---- | M] (GFI Software) -- C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe
PRC - [2012/04/04 06:25:00 | 000,295,584 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2012/03/04 06:39:33 | 001,592,160 | ---- | M] () -- C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Capture.exe
PRC - [2012/02/29 17:30:43 | 000,815,104 | ---- | M] (Epitiro Ltd.) -- C:\Program Files\Broadband Test Application\BroadbandTestApp.exe
PRC - [2012/01/20 22:03:48 | 000,719,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
PRC - [2012/01/16 11:04:46 | 001,007,472 | ---- | M] () -- C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Service.exe
PRC - [2011/08/19 10:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
PRC - [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/12/10 03:39:04 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
PRC - [2009/12/10 03:37:16 | 003,690,496 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
PRC - [2009/07/14 02:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
PRC - [2008/11/09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2006/12/11 13:12:06 | 000,537,520 | ---- | M] ( ) -- C:\Windows\System32\lxcrcoms.exe


========== Modules (No Company Name) ==========

MOD - [2013/06/05 11:11:44 | 000,128,512 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_elementtree.pyd
MOD - [2013/06/05 11:11:44 | 000,098,816 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32api.pyd
MOD - [2013/06/05 11:11:44 | 000,044,032 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_socket.pyd
MOD - [2013/06/05 11:11:44 | 000,022,528 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32ts.pyd
MOD - [2013/06/05 11:11:43 | 000,557,056 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\pysqlite2._sqlite.pyd
MOD - [2013/06/05 11:11:43 | 000,320,512 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32com.shell.shell.pyd
MOD - [2013/06/05 11:11:43 | 000,026,624 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_multiprocessing.pyd
MOD - [2013/06/05 11:11:42 | 001,175,040 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._core_.pyd
MOD - [2013/06/05 11:11:42 | 001,153,024 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_ssl.pyd
MOD - [2013/06/05 11:11:42 | 001,022,416 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\windows._cacheinvalidation.pyd
MOD - [2013/06/05 11:11:42 | 000,811,008 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._windows_.pyd
MOD - [2013/06/05 11:11:42 | 000,805,888 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._gdi_.pyd
MOD - [2013/06/05 11:11:42 | 000,735,232 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._misc_.pyd
MOD - [2013/06/05 11:11:42 | 000,711,680 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_hashlib.pyd
MOD - [2013/06/05 11:11:42 | 000,364,544 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\pythoncom27.dll
MOD - [2013/06/05 11:11:42 | 000,122,368 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._wizard.pyd
MOD - [2013/06/05 11:11:42 | 000,119,808 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32file.pyd
MOD - [2013/06/05 11:11:42 | 000,110,080 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\PyWinTypes27.dll
MOD - [2013/06/05 11:11:42 | 000,108,544 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32security.pyd
MOD - [2013/06/05 11:11:42 | 000,087,040 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\_ctypes.pyd
MOD - [2013/06/05 11:11:42 | 000,070,656 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._html2.pyd
MOD - [2013/06/05 11:11:42 | 000,038,912 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32inet.pyd
MOD - [2013/06/05 11:11:42 | 000,035,840 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32process.pyd
MOD - [2013/06/05 11:11:42 | 000,025,600 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32pdh.pyd
MOD - [2013/06/05 11:11:42 | 000,017,408 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32profile.pyd
MOD - [2013/06/05 11:11:42 | 000,011,264 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32crypt.pyd
MOD - [2013/06/05 11:11:41 | 001,062,400 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\wx._controls_.pyd
MOD - [2013/06/05 11:11:41 | 000,686,080 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\unicodedata.pyd
MOD - [2013/06/05 11:11:41 | 000,127,488 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\pyexpat.pyd
MOD - [2013/06/05 11:11:41 | 000,018,432 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\win32event.pyd
MOD - [2013/06/05 11:11:41 | 000,010,240 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\temp\_MEI52602\select.pyd
MOD - [2013/05/19 21:32:04 | 002,516,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\7a0945794677c70d5ec25b00493ece3f\System.Data.Linq.ni.dll
MOD - [2013/05/19 21:32:04 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\990123c5701a26f1d724150839811bce\System.Xml.Linq.ni.dll
MOD - [2013/05/19 21:31:34 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\f790ac5c52534a143d43ac48e25423ea\System.ComponentModel.DataAnnotations.ni.dll
MOD - [2013/05/19 21:19:29 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\3c2ed368e1f3889997dfb42a5ca77284\System.Core.ni.dll
MOD - [2013/05/19 20:58:29 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll
MOD - [2013/05/19 20:58:09 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\764f15e86c82662e977bd418bd6318c1\System.Configuration.ni.dll
MOD - [2013/05/18 20:12:27 | 003,128,728 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013/05/15 05:38:18 | 016,033,160 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_202.dll
MOD - [2013/04/26 08:44:41 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ad51da1b752b19c992fcefd56eb7c01\System.Runtime.Serialization.ni.dll
MOD - [2013/04/26 08:44:08 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\01c6cb58745f397c9b7ccf3ab7bfc9cd\System.EnterpriseServices.ni.dll
MOD - [2013/04/26 08:44:08 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\536d704e93ffec9b54e4a0312fb5b996\System.Transactions.ni.dll
MOD - [2013/04/26 08:44:07 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\dd20416f723ee13ffb4173ec1afc4ec4\System.Data.ni.dll
MOD - [2013/04/26 08:43:42 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013/04/26 08:43:40 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d908c91e24616e6b8d38c9da61038b25\Accessibility.ni.dll
MOD - [2013/04/26 08:43:26 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll
MOD - [2013/04/26 08:43:22 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013/04/26 08:43:11 | 011,493,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2013/03/27 12:18:35 | 000,058,848 | ---- | M] () -- C:\Program Files\GfKLSPService\GfK-WatchDog.exe
MOD - [2013/02/21 16:18:36 | 000,032,768 | ---- | M] () -- C:\Users\BooHoo\AppData\Local\Panel+\service\TrotiNet.dll
MOD - [2013/02/13 03:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013/02/13 03:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2012/11/14 23:12:49 | 000,271,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
MOD - [2011/03/24 15:31:58 | 000,233,472 | ---- | M] () -- C:\Program Files\Broadband Test Application\SpeedTestClient.dll
MOD - [2011/03/17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/11/20 22:29:11 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010/10/20 16:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2010/07/22 15:43:06 | 000,077,824 | ---- | M] () -- C:\Program Files\Broadband Test Application\CrashRpt.dll
MOD - [2009/06/10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll


========== Services (SafeList) ==========

SRV - [2013/05/18 20:12:27 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/05/15 05:38:19 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/23 08:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/03/27 12:52:12 | 003,020,768 | ---- | M] () [Auto | Running] -- C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe -- (GfK-Reporting-Service)
SRV - [2013/03/27 12:52:08 | 001,376,224 | ---- | M] () [Auto | Running] -- C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe -- (GfK-Update-Service)
SRV - [2013/03/27 12:18:37 | 003,300,320 | ---- | M] (GfK) [Auto | Running] -- C:\Program Files\GfKLSPService\GfKLspService.exe -- (GfKLSPService)
SRV - [2013/03/18 03:25:46 | 001,236,336 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe -- (Ad-Aware Service)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/12/16 12:25:18 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV - [2012/11/22 11:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012/10/19 15:51:08 | 000,395,200 | ---- | M] (Eastman Kodak Company) [Auto | Running] -- C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe -- (Kodak AiO Network Discovery Service)
SRV - [2012/10/15 12:58:22 | 000,779,200 | ---- | M] (Eastman Kodak Company) [Auto | Running] -- C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe -- (Kodak AiO Status Monitor Service)
SRV - [2012/09/20 14:28:48 | 030,785,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2012/09/20 05:39:12 | 003,677,000 | ---- | M] (GFI Software) [Auto | Running] -- C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe -- (SBAMSvc)
SRV - [2012/02/29 17:30:43 | 000,815,104 | ---- | M] (Epitiro Ltd.) [Auto | Running] -- C:\Program Files\Broadband Test Application\BroadbandTestApp.exe -- (bbtest_svc)
SRV - [2012/01/16 11:04:46 | 001,007,472 | ---- | M] () [Auto | Running] -- C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Service.exe -- (M4-Service)
SRV - [2012/01/10 00:19:06 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/08/19 10:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2009/12/10 03:39:04 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe -- (pgsql-8.3)
SRV - [2009/07/14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/11/09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2006/12/11 13:12:06 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxcrcoms.exe -- (lxcr_device)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | System | Stopped] -- C:\Windows\system32\drivers\SBREdrv.sys -- (SBRE)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nlndis.sys -- (NLNdisPT)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nlndis.sys -- (NLNdisMP)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\MsgPlusDriver.sys -- (MsgPlusDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\BooHoo\AppData\Local\Temp\mfe_rr.sys -- (MFE_RR)
DRV - [2013/05/09 18:06:06 | 000,013,560 | ---- | M] (GFI Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\gfibto.sys -- (gfibto)
DRV - [2013/04/11 11:06:45 | 000,041,584 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gfiark.sys -- (gfiark)
DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/12/16 12:25:16 | 000,157,776 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV - [2012/09/12 20:19:38 | 000,066,344 | ---- | M] (GFI Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\sbapifs.sys -- (sbapifs)
DRV - [2012/09/12 08:44:47 | 000,027,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hitmanpro36.sys -- (hitmanpro36)
DRV - [2012/08/20 16:48:44 | 000,015,576 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdrvio.sys -- (pwdrvio)
DRV - [2012/08/20 16:48:44 | 000,010,200 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdspio.sys -- (pwdspio)
DRV - [2012/04/06 19:15:10 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV - [2011/08/19 10:26:50 | 004,334,624 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2011/08/19 10:26:46 | 000,315,808 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2011/07/29 14:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2011/07/29 14:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2011/07/21 15:33:32 | 000,117,104 | ---- | M] (Privacyware/PWI, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\pwipf6.sys -- (pwipf6)
DRV - [2011/05/18 17:31:32 | 000,181,008 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ssidrv.sys -- (ssidrv)
DRV - [2011/05/18 17:31:30 | 000,024,496 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sshrmd.sys -- (sshrmd)
DRV - [2011/05/18 17:31:28 | 000,045,584 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [File_System | Auto | Running] -- C:\Windows\System32\drivers\ssfmonm.sys -- (ssfmonm)
DRV - [2010/11/20 22:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 22:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/10/01 20:40:00 | 001,149,552 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2010/03/24 11:08:08 | 000,028,160 | ---- | M] (OPTO ELECTRONICS CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\optovcm.sys -- (optovcm)
DRV - [2010/03/24 11:08:08 | 000,022,016 | ---- | M] (OPTO ELECTRONICS CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\optousb.sys -- (optousb)
DRV - [2009/07/14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/13 23:02:53 | 000,657,408 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u)
DRV - [2009/07/13 23:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2009/04/29 16:37:26 | 000,025,088 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?r...opt=0&ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F2 54 DE 6D 5B 4F CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=localhost:44413

========== FireFox ==========

FF - prefs.js..browser.startup.homepage:


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@IpsosPanelPlus@ipsosinteractive.com: C:\Users\BooHoo\AppData\Local\Panel+\toolbar_ff\plugins\npIpsosCommPlugin.dll (IDM)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013/01/29 21:56:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\gacela2@nurago.com: C:\Program Files\GfK Internet-Monitor [2013/06/06 05:13:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3DF533F5-FB3C-4c4c-A1D7-99717F8C3038}: C:\Program Files\Webroot\Security\current\plugins\browserextension\ff_ptc\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2013/02/15 01:19:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013/04/11 21:36:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/18 20:12:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/06/06 04:16:56 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\IpsosPanelPlus@ipsosinteractive.com: C:\Users\BooHoo\AppData\Local\Panel+\toolbar_ff\ [2013/05/16 00:43:59 | 000,000,000 | ---D | M]

[2012/01/13 01:41:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Extensions
[2012/09/11 23:28:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\i1h185fb.default\extensions
[2012/09/10 05:29:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\i1h185fb.default\extensions\userzoom_survey_tool@jetpack
[2013/05/09 18:08:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\v4mj4eoc.default-1347251320671\extensions
[2013/05/09 18:08:25 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\v4mj4eoc.default-1347251320671\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
[2013/05/28 21:06:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions
[2013/05/15 05:39:51 | 000,000,000 | ---D | M] (Swag Bucks) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}
[2013/05/28 21:06:27 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013/04/06 22:59:34 | 000,000,000 | ---D | M] (Advanced Cookie Manager) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\cookiemgr@jayapal.com
[2013/05/09 18:08:26 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
[2013/04/06 22:59:34 | 000,000,000 | ---D | M] (UserZoom Survey Tool) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\userzoom_survey_tool@jetpack
[2013/03/02 23:45:54 | 000,243,287 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\amznUWL2@amazon.com.xpi
[2013/01/13 21:36:10 | 000,223,719 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\isreaditlater@ideashower.com.xpi
[2013/01/29 20:03:31 | 000,015,751 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\restartless.restart@erikvold.com.xpi
[2012/11/24 01:46:50 | 000,042,512 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\treatstreet@boots.com.xpi
[2013/03/07 06:40:06 | 000,555,767 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\{841468a1-d7f4-4bd3-84e6-bb0f13a06c64}.xpi
[2013/03/07 06:40:05 | 000,555,942 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\{c125f32a-0273-6b74-75a1-48f111c4977c}.xpi
[2013/04/20 14:42:43 | 000,765,412 | ---- | M] () (No name found) -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2013/04/11 11:22:32 | 000,001,292 | ---- | M] () -- C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\v4mj4eoc.default-1347251320671\searchplugins\visualbee.xml
[2013/05/18 20:12:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/04/11 20:17:25 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/04/11 20:17:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com
[2013/05/18 20:12:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/18 20:12:29 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/06/20 17:54:54 | 000,091,584 | ---- | M] (Coupons, Inc.) -- C:\Program Files\mozilla firefox\plugins\npCouponPrinter.dll
[2012/06/20 17:54:56 | 000,091,584 | ---- | M] (Coupons, Inc.) -- C:\Program Files\mozilla firefox\plugins\npMozCouponPrinter.dll
[2012/06/28 16:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2013/04/11 11:24:00 | 000,002,297 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml

========== Chrome ==========

CHR - default_search_provider: VisualBee Search (Enabled)
CHR - default_search_provider: search_url = http://visualbee.del...4998C89A5644F4F
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://visualbee.del...4998C89A5644F4F
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Gacela Plugin (Enabled) = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef\12.1.1136_0\plugin/npgacela.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U7 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.70.10 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll
CHR - Extension: Google Drive = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: GfK Internet-Monitor = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef\13.1.49_0\
CHR - Extension: Panel+ = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaomfkhlibpgkpmjjkfjpfjhebhbgcah\5.3.5_0\
CHR - Extension: Skype Click to Call = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.4.0.11328_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0\
CHR - Extension: Gmail = C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/05/28 05:43:34 | 000,000,890 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
O1 - Hosts: 8
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (GfK Internet-Monitor) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
O2 - BHO: (RoboForm Toolbar Helper) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (&RoboForm Toolbar) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm Toolbar) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Ad-Aware Antivirus] C:\Program Files\Ad-Aware Antivirus\AdAwareLauncher.exe (Lavasoft Limited)
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Conime] %windir%\system32\conime.exe File not found
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EKStatusMonitor] C:\Program Files\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe (Eastman Kodak Company)
O4 - HKLM..\Run: [GfK-WatchDog] C:\Program Files\GfKLSPService\GfK-WatchDog.exe ()
O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [Panel+] C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusService.exe (Ipsos)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKCU..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - Startup: C:\Users\BooHoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~4\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Show RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra 'Tools' menuitem : About GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
O9 - Extra Button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Show RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\GfKLSPService.DLL (GfK)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\GfKLSPService.DLL (GfK)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\GfKLSPService.DLL (GfK)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\GfKLSPService.DLL (GfK)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\GfKLSPService.DLL (GfK)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {EBB176D2-AF75-4706-832F-4C8448F72757} http://www.shopandsc.../TNSClickrc.CAB (TNSClickerc.Clicker)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9EDB02A1-8E1E-4569-99B7-559BC23336B7}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C0AB72F7-81A8-42D1-8605-07F5329092E3}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (─ƝၐƝ) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found
O29 - HKLM SecurityProviders - (digest.dll) - File not found
O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/06/06 04:59:32 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\BooHoo\Desktop\OTL.exe
[2013/05/28 05:46:45 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\Documents\Adobe
[2013/05/28 05:41:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6
[2013/05/19 22:05:23 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\Desktop\Flumpy
[2013/05/19 21:00:44 | 000,000,000 | R--D | C] -- C:\Users\BooHoo\Saved Games
[2013/05/19 17:09:51 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\Desktop\Dance With my Father
[2013/05/16 00:44:15 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Roaming\Panel+
[2013/05/16 00:43:55 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Local\Panel+
[2013/05/16 00:43:53 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Panel+
[2013/05/15 21:26:48 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Local\Ancestry.com
[2013/05/09 19:21:50 | 000,041,584 | ---- | C] (ThreatTrack Security) -- C:\Windows\System32\drivers\gfiark.sys
[2013/05/09 18:20:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Antivirus
[2013/05/09 18:20:24 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Roaming\LavasoftStatistics
[2013/05/09 18:10:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
[2013/05/09 18:10:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2013/05/09 18:10:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\VDD
[2013/05/09 18:10:28 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Aware Antivirus
[2013/05/09 18:08:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2013/05/09 18:08:48 | 000,000,000 | ---D | C] -- C:\ProgramData\blekko toolbars
[2013/05/09 18:08:45 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Local\adawarebp
[2013/05/09 18:08:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Browsing Protection
[2013/05/09 18:08:32 | 000,000,000 | ---D | C] -- C:\Program Files\adawaretb
[2013/05/09 18:08:27 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2013/05/09 18:06:07 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013/05/09 01:30:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013/05/09 00:49:04 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\AppData\Local\Avg2013
[2013/05/08 21:41:27 | 000,000,000 | ---D | C] -- C:\Users\BooHoo\Desktop\Skype
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/06/06 05:49:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/06/06 05:11:33 | 000,026,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/06 05:11:33 | 000,026,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/06 05:04:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/06/06 04:59:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\BooHoo\Desktop\OTL.exe
[2013/06/06 04:39:40 | 1107,502,080 | ---- | M] () -- C:\Users\BooHoo\Documents\Outlook Backup - 12-09-12.pst
[2013/06/06 04:17:38 | 000,000,444 | ---- | M] () -- C:\Windows\tasks\IsposureAgent.job
[2013/06/05 17:27:00 | 000,001,798 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013/06/05 11:13:25 | 000,001,262 | ---- | M] () -- C:\Users\BooHoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2013/06/05 11:11:58 | 000,001,826 | ---- | M] () -- C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
[2013/06/05 11:11:43 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/06/05 11:11:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/06/05 11:10:16 | 2589,908,992 | -HS- | M] () -- C:\hiberfil.sys
[2013/06/05 01:09:08 | 000,131,520 | ---- | M] () -- C:\Users\BooHoo\Desktop\Funeral - Order of Service.one
[2013/05/30 23:38:19 | 003,838,424 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/05/30 22:56:30 | 000,025,839 | ---- | M] () -- C:\Users\BooHoo\Desktop\Capture.JPG
[2013/05/25 23:07:48 | 000,034,622 | ---- | M] () -- C:\Users\BooHoo\Desktop\Holy Sh-t - Episode 1 first 10 - pass holyshit.pdf
[2013/05/19 21:09:14 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013/05/19 20:44:11 | 000,662,920 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/05/19 20:44:11 | 000,121,788 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/05/19 20:33:02 | 000,000,134 | ---- | M] () -- C:\Users\BooHoo\Desktop\Internet Explorer Troubleshooting.url
[2013/05/09 18:06:06 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013/05/08 23:58:22 | 023,230,591 | ---- | M] () -- C:\Users\BooHoo\Desktop\2013-05-01 21-38-00.771.wmv
[2013/05/08 23:57:46 | 017,054,291 | ---- | M] () -- C:\Users\BooHoo\Desktop\2013-05-07 23-40-23.352.wmv
[2013/05/08 05:03:17 | 000,000,569 | -H-- | M] () -- C:\Windows\System32\BTImages.dat
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/06/05 01:08:51 | 000,131,520 | ---- | C] () -- C:\Users\BooHoo\Desktop\Funeral - Order of Service.one
[2013/05/30 22:56:26 | 000,025,839 | ---- | C] () -- C:\Users\BooHoo\Desktop\Capture.JPG
[2013/05/25 23:07:41 | 000,034,622 | ---- | C] () -- C:\Users\BooHoo\Desktop\Holy Sh-t - Episode 1 first 10 - pass holyshit.pdf
[2013/05/19 21:09:14 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013/05/19 20:33:02 | 000,000,134 | ---- | C] () -- C:\Users\BooHoo\Desktop\Internet Explorer Troubleshooting.url
[2013/05/09 18:10:46 | 000,001,826 | ---- | C] () -- C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
[2013/05/08 23:56:02 | 023,230,591 | ---- | C] () -- C:\Users\BooHoo\Desktop\2013-05-01 21-38-00.771.wmv
[2013/05/08 23:56:02 | 017,054,291 | ---- | C] () -- C:\Users\BooHoo\Desktop\2013-05-07 23-40-23.352.wmv
[2013/05/07 17:44:15 | 000,000,569 | -H-- | C] () -- C:\Windows\System32\BTImages.dat
[2013/04/20 07:08:23 | 000,000,218 | ---- | C] () -- C:\Users\BooHoo\AppData\Local\recently-used.xbel
[2013/04/20 07:00:33 | 000,000,035 | ---- | C] () -- C:\Users\BooHoo\.gtk-bookmarks
[2013/04/12 04:31:13 | 000,004,994 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf
[2013/04/11 21:39:28 | 000,001,798 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2013/03/27 18:20:25 | 000,003,848 | ---- | C] () -- C:\Windows\System32\GfKLSPService.ini
[2013/03/27 18:20:25 | 000,002,640 | ---- | C] () -- C:\Windows\System32\GacelaLSPServiceOff.ini
[2013/02/21 21:36:28 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2012/12/13 19:52:37 | 000,180,624 | ---- | C] () -- C:\Windows\System32\Primomonnt.dll
[2012/09/24 14:31:08 | 000,001,119 | ---- | C] () -- C:\Windows\System32\EKaio2WiaCoInst.ini
[2012/09/12 08:22:51 | 000,027,424 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro36.sys
[2012/09/08 01:35:06 | 000,030,424 | ---- | C] () -- C:\Windows\System32\wrLZMA.dll
[2012/08/29 19:51:35 | 000,000,000 | ---- | C] () -- C:\ProgramData\da0243f6188038df2394764a7c7ead90_c
[2012/08/28 17:41:58 | 000,000,051 | ---- | C] () -- C:\Users\BooHoo\AppData\Roaming\mbam.context.scan
[2012/08/13 23:53:58 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2012/08/12 07:07:39 | 000,053,248 | ---- | C] () -- C:\Windows\System32\zlib.dll
[2012/07/01 23:01:44 | 000,003,206 | ---- | C] () -- C:\Windows\wininit.ini
[2012/06/13 04:21:48 | 000,211,236 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2012/06/13 00:46:58 | 000,004,159 | ---- | C] () -- C:\ProgramData\gbianycz.qhq
[2012/02/29 17:25:40 | 000,000,296 | ---- | C] () -- C:\Windows\{FC0C329F-2851-4859-A2EC-4DCF4874E5D6}_WiseFW.ini
[2012/02/22 01:47:19 | 000,004,096 | -H-- | C] () -- C:\Users\BooHoo\AppData\Local\keyfile3.drm
[2012/02/07 21:11:50 | 000,123,392 | ---- | C] () -- C:\Windows\System32\UnCasino5.exe
[2012/01/29 02:56:30 | 002,469,760 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2012/01/29 02:56:30 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2012/01/29 02:56:30 | 000,019,840 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2012/01/29 02:56:30 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2012/01/29 02:56:30 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2012/01/29 02:25:47 | 002,872,000 | ---- | C] () -- C:\Windows\System32\pwNative.exe
[2012/01/29 02:25:46 | 000,015,576 | ---- | C] () -- C:\Windows\System32\pwdrvio.sys
[2012/01/29 02:25:40 | 000,010,200 | ---- | C] () -- C:\Windows\System32\pwdspio.sys
[2012/01/22 17:41:40 | 001,224,704 | ---- | C] ( ) -- C:\Windows\System32\lxcrserv.dll
[2012/01/22 17:41:40 | 000,991,232 | ---- | C] ( ) -- C:\Windows\System32\lxcrusb1.dll
[2012/01/22 17:41:40 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxcrpmui.dll
[2012/01/22 17:41:40 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxcrlmpm.dll
[2012/01/22 17:41:40 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxcrinpa.dll
[2012/01/22 17:41:40 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxcriesc.dll
[2012/01/22 17:41:40 | 000,385,968 | ---- | C] ( ) -- C:\Windows\System32\lxcrih.exe
[2012/01/22 17:41:40 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\LXCRhcp.dll
[2012/01/22 17:41:40 | 000,274,432 | ---- | C] () -- C:\Windows\System32\LXCRinst.dll
[2012/01/22 17:41:40 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxcrprox.dll
[2012/01/22 17:41:40 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxcrpplc.dll
[2012/01/22 17:41:39 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxcrcomc.dll
[2012/01/22 17:41:39 | 000,537,520 | ---- | C] ( ) -- C:\Windows\System32\lxcrcoms.exe
[2012/01/22 17:41:39 | 000,421,888 | ---- | C] ( ) -- C:\Windows\System32\lxcrcomm.dll
[2012/01/15 18:21:52 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012/01/13 01:46:43 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2012/01/10 01:00:03 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2012/01/10 00:52:56 | 000,134,592 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
[2012/01/10 00:49:45 | 000,020,635 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2012/01/10 00:25:38 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012/01/10 00:25:34 | 000,015,378 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2011/08/19 10:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2011/08/19 10:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2011/08/19 10:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2011/07/26 07:48:54 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini

========== ZeroAccess Check ==========

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 05:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/08/18 20:43:05 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Ad-Aware Antivirus
[2012/05/15 04:06:14 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Amazon
[2012/08/23 15:40:52 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Anvisoft
[2012/12/13 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Anvsoft
[2012/01/29 21:49:01 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Audacity
[2013/04/03 06:10:08 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\AVG
[2013/06/05 11:29:04 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Azureus
[2013/04/11 11:23:04 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Babylon
[2012/02/11 01:05:20 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013/05/06 17:30:07 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\CheckPoint
[2012/03/05 04:57:25 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\DAZ 3D
[2013/01/27 11:39:08 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Elluminate
[2013/05/15 22:01:22 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\FamilyTreeMaker
[2012/12/12 00:52:57 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\FLV Extract
[2013/04/22 01:52:34 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\fpdb
[2013/02/21 21:45:03 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\FriendsGamesNetwork
[2012/02/25 19:34:59 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\ID3-TagIT 3
[2012/08/12 07:24:42 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\IObit
[2012/04/04 15:36:19 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Keynote Systems
[2012/08/11 00:45:09 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Microgaming
[2012/03/04 06:44:01 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Mikogo 4
[2012/04/27 23:25:47 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Mobipocket
[2012/02/26 19:54:50 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\MusicBrainz
[2012/02/11 04:22:52 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Nico Mak Computing
[2012/12/13 19:53:22 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\OpenCandy
[2012/09/30 16:56:04 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\OpenOffice.org
[2012/10/10 05:03:16 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Opera
[2013/05/16 00:44:56 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Panel+
[2013/02/26 00:08:53 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\PDAppFlex
[2012/12/13 20:00:05 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\PrimoPDF
[2012/01/13 02:33:04 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\RoboForm
[2012/03/12 02:49:30 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Screenshot Sender
[2013/01/19 20:52:50 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\TeamViewer
[2013/04/20 03:46:53 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\TechSmith
[2012/10/07 20:31:56 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\Temp
[2013/01/16 23:21:13 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\TuneUp Software
[2012/08/13 23:45:09 | 000,000,000 | ---D | M] -- C:\Users\BooHoo\AppData\Roaming\WinPatrol

========== Purity Check ==========



< End of report >
  • 0

Similar Topics: Frequent freezing with Firefox problems.     x


#2
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
Hello UpTheCreek,

That OTL log shows the System Drive as only having 4.26% space free. There is less then 5% of the drive free. You are in danger of messing up the Master File Table of the computer. It is risky running the tools we are using at this low level of free space.

Under 15% free is less than optimum.

I suggest you uninstall any old programs and back up and remove any data you don't need.

Now

Please run OTL.exe

  • Under the Custom Scans/Fixes box at the bottom, copy and paste the content of the quote box below:

    :OTL
    C:\Users\BooHoo

    :Files
    ipconfig /flushdns /c

    :Commands
    [resethosts]
    [emptytemp]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • It will produce a log for you on reboot, please post that log in your next reply.The log is saved in the same location as OTL.
Next

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right click JRT.exe and "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Finally in this post

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. For this machine that will be the 32bit version.

  • Right click to run as administrator. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called (FRST.txt) in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run, it makes also another log (Addition.txt). Please also paste that into your reply.
So when you return please post
  • OTL.txt
  • JRT.txt
  • FRST.txt
  • Addition.txt

  • 0

#3
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
Last night and this morning, before seeing the reply, my girlfriend had already freed-up 196GB of space and defragmented her C drive (see attachment).
She then ran Junkware Removal Tool (log below), which deleted quite a lot of crap. She had ESET Online Scanner running for the past seven or so hours, but, at 99%, it became stuck on the same file for an hour, although it hadn't stopped responding according to Task Manager. As you can see from the attached image, it found a number of threats, so may be worth running again(?). The OTL fix has been applied and the PC rebooted, so I will await your reply before doing anything further.

Many thanks.


IMG_10062013_233244.png
IMG_11062013_000110.png


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Ultimate x86
Ran by BooHoo on 06/10/2013 at 16:25:27.74
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\competeinc
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\office\powerpoint\addins\babylonofficeaddin.officeaddin
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\office\word\addins\babylonofficeaddin.officeaddin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\applications\ilividsetupv1.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetie.ietoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetie.ietoolbar.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.sweetie
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.sweetie.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.dynamicbarbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.dynamicbarbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.feedmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.feedmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlmenu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlmenu.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlpanel
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlpanel.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.multiplebutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.multiplebutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.pseudotransparentplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.pseudotransparentplugin.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radio
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radio.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radiosettings
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radiosettings.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.scriptbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.scriptbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.settingsplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.settingsplugin.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.skinlauncher
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.skinlauncher.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.thirdpartyinstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.thirdpartyinstaller.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.urlalertbutton
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.urlalertbutton.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.xmlsessionplugin
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.xmlsessionplugin.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\babylon_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\babylon_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\babylontc_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\babylontc_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\bundlesweetimsetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\bundlesweetimsetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\ilividsetupv1_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\ilividsetupv1_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\sweetim_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\sweetim_rasmancs



~~~ Files

Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npcouponprinter.dll"
Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npmozcouponprinter.dll"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\blekko toolbars"
Successfully deleted: [Folder] "C:\Users\BooHoo\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\BooHoo\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\BooHoo\appdata\local\adawarebp"
Successfully deleted: [Folder] "C:\Users\BooHoo\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\BooHoo\appdata\locallow\adawaretb"
Successfully deleted: [Folder] "C:\Users\BooHoo\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\BooHoo\appdata\locallow\videodownloadconverter_4z"
Successfully deleted: [Folder] "C:\Program Files\adawaretb"
Successfully deleted: [Folder] "C:\Program Files\coupons"
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{007D8957-27DD-4A2C-9D6B-BA813FFAADD1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{009955AA-F96D-4332-9316-31E5D2CAB52E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{009C1720-8F64-4613-93EC-77B25D63890E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{01441209-B77B-4F73-85B5-813E0910D312}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{01C16018-D5F1-4183-A9A4-29798D7B913B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{02D1077D-BBE7-4013-9562-C124B5D2C975}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{035B0C91-A0F6-482F-B8A7-7435B5199A64}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{03DF6224-BE3F-4B99-A211-80A5AD4073FD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{04CC2926-400B-47BC-A642-94813DF98064}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{067A2C71-FC67-414D-A01F-B6196685A85A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{07AC64C1-0A24-4038-9DA6-0F176004A1BC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{07D533B1-1ED7-42DB-B1CA-690B1F10BC0A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{08275F81-ECF5-451C-A14C-C5E74C1F73E9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{082D6C84-7C70-42D2-9C68-0D18C4BE70FA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0879EDE1-38D3-4B05-AF17-AEC57D928FAF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{090E872F-ADE2-4F16-8E75-9EF6766C6722}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0943F9B5-809A-4B03-A177-FA62CEBF9DE2}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{09E62EF1-7C95-4BBC-A238-1863E4807D4B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0B844C8D-9E99-4A15-B0B9-A335A3EA4037}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0BBE103B-65BF-42B4-B725-E092F0E4D5C7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0C47FAE8-CC6B-47B9-AB1E-24CF21E49070}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0CC5BD26-9D87-47F7-B7A6-F4BD9DB2C0C3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0CF14180-60B8-4447-924C-2CA00EC0CA53}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0D00ACC9-CF62-48AC-8D0F-503ECE1095A8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0D5853C0-1A1D-4279-B4D0-583BEE20D9BE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0F514585-3A45-4184-B838-D1A035412F8A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0F67E418-70D2-4CBB-A32E-70B7CAC2A647}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0F82BF2C-46BC-4242-B570-2D2BA9A6B698}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{0FE67F86-1473-4860-8F53-7D77EA9D2066}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{103B7E73-1A15-4F0C-811A-BA8537F152CF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{104785C3-447B-489C-B708-7AD58A55A00F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10621AC2-CDAF-4894-B55A-E8DD4F59C85E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10913327-1699-4290-B210-7D60A0B0FFD4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10CEBB37-CFD4-4775-81C5-06ABC4BD8A70}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10D73BE3-4BF9-434F-8B82-116A9508C5C0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10DF345A-16E8-441B-9A25-A1AC12F985FD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10FAD7B8-D403-4ECD-9809-4233D92AABFC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{10FCA0B2-B2A3-4219-8CB2-23FCC9ACAF12}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{128C89E5-AB1E-40E4-B75C-1D301E31ED89}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{12A029EB-A23C-4216-AF6D-0C0E4D680821}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{12D1265D-6F16-451F-90E2-A2E3C5BF152A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{12DBA94A-01F5-4ACA-9145-3DE998183D5C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1443E959-AEAE-410B-9E13-678F26946994}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{14702DB0-77B3-479D-A741-B664E1F54A67}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{153F8D7C-630A-477A-98ED-3B6EABB3A6A5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{160879D7-8E02-493A-9F00-036BDDA8668D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1669A222-70A9-4D2A-97FA-EB0163CB7F34}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{171CDA9B-65BE-4930-9896-70F260CA1918}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{17770E1F-1C59-4047-9E68-B795B025F3F1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{17B600CE-71DD-46E6-A764-1EE0C965970E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{18526AFD-2982-4171-8F80-4B5265E111E9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1A8FB05B-2B35-492B-BDDA-CBEACDDEA79A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1ABDEC92-0741-47C9-9253-A6509BA6A2FA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1B43F95C-C828-4F9A-9D7C-24A97D76D68C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1BA46F63-548A-4F38-9502-03BA37338EEB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1BB9298E-21AB-485A-8477-2F77795BF8EC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1CEE3782-B21A-4BD2-B55A-4283599CF6FB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1D09DD56-1814-407E-9E4D-17698E973ED3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1DB78969-D724-456C-8FC8-0B04EA69882F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{1F1C5429-99B4-4136-AC05-71C4CA2B12F1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{21F4B61A-4673-4E46-B11B-1C6BDB3FAE5F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{224F9843-675E-4338-930D-28F494E6A583}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{22AC8586-7E75-441D-9BA0-7FFAA99FB739}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{23262D0E-F8CA-4A33-A339-177B95A35519}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{25044B77-D255-4012-BCA6-C7AFFE19F9FD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{256E7427-5E88-4893-9F3C-A51E23BF96F9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{256E812C-EEF4-4E19-B5FE-BAFA1CE289C4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{25B70B51-F750-410E-96BD-9BE55D5FFF8A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{25F2BA53-E92A-4CD2-B6D4-B7B0FA56B899}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2635E23D-3AEB-4EAE-BFE1-DBF8E710E8AD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{26E06B0E-68B6-43BB-860F-CDA7BF50A21B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{270F694D-00D2-4DD9-B945-CB7E1FB46098}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{27CC53B4-46C8-4AFE-B4D4-BA61774312A6}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{287FA76F-2A1A-425C-A595-57D9E8F425F6}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{28A4521C-F6F5-4816-B368-72B750B5F8C7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{29690B0F-7191-4894-AD9B-B9216F3F0CFB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{29C22341-ACB8-464E-A4D8-9C6867D78E85}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{29CFAB09-4F85-4920-89EA-BA8642C1F76F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2AB62767-DA9B-4D5B-B9DD-521F1BB386C9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2AE2A1DE-BC0B-474E-8F26-BCBFBC0A3B4D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2AF0BA04-679A-43B0-B098-681EB1D12FB2}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2BAF6643-DD9F-473E-A8EC-4FB0B1147AA9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2D356BAB-2867-4E4A-A6DE-2FC3CF632020}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2DE8E86A-4FFD-446C-9599-AA80714129CC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2E246717-ED50-4900-B120-FFD9DEB98513}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{2FB14BCF-FBA1-47AE-BADF-3667C21EC4D4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{30247AFE-41C3-46BD-80B0-2E2C10B409DE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3081F882-C4DE-40C1-96C2-48DA2B0E4396}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{310BC204-1F30-417A-91BE-E895153FAF98}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3165A3F6-15E6-43CF-8153-A92FEA26EB1F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3183091F-F602-4A2D-9808-B3B07698EBD4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{31AA12AA-E781-48E9-A9A5-C9CC0BBA8B23}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{31F09305-C0DE-4002-8D5B-86E1FA9D2B95}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{321ED944-74F1-4F93-A917-D4F04EA8D467}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{32A9E18C-87D5-4241-8E6F-E9911DB365C4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{33588115-9359-4CCC-8339-1C5EBA13C082}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3435A1E2-4FCF-44E5-ACE2-80ED5554989A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{34F93920-BD1F-40AE-9830-BD5B8E541A19}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3559C6C9-7812-4258-A48B-13FDD9E37213}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{355A4FD5-6552-42CD-8558-8E8CEC3E9304}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{359F5E00-57E2-47F8-A2D6-118202264555}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{35B513E9-1504-421D-9F44-E2E388FF33E1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{35CEB63A-419F-4A5E-AF15-625593252BFB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{365EF39D-FAD2-4C35-83ED-E188E00E78B5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{369B7E55-7E37-4B7E-BEEB-395C0FBF7B94}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{377BDDE1-269B-407C-BAAA-6A4FC7220154}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{385B6035-D168-42A5-ADDB-A6C32297ADB7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{393575D9-6ACA-49CC-82F6-D46ADE0CA4B8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3942486D-8FEA-42C7-8EA3-93BEABD9DFC4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{39CEA0F0-13C7-4BDD-8A63-B9D325D3D499}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{39EE113B-2F7A-4034-AB3E-B74D91021F06}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3AA5848D-08C6-40C0-A9C5-E0B1A7F091B5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3AA66335-1EFA-4491-9C4B-106937653664}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3AC6F1E3-518C-4FE5-9A49-A4CC5448125A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3B74F154-813D-4B82-A09D-ED2481DBF575}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3B780113-CFE0-42B6-96D7-36F7F5BED4DD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3BF9DFFB-B750-4E04-9E33-BACC56036240}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3CCA014D-336B-4990-9AF2-48808B028E38}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3D42D014-7D37-44C3-A0A0-E5358AA16FD6}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3DCFB5EC-264E-4E7D-8FE3-87D874B7C140}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3E5802D4-542A-432D-9070-162BA39EF210}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3E78372B-EEAA-481C-B6A9-304310BC5C75}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3EBB5687-B8D0-43A6-8FBE-B5BA341E261C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3F046327-86BD-4AF9-8B1D-9CDAE628194A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3F0500B0-315A-4AA8-92E9-7253033EEEBD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{3F407435-E41F-44E9-A2FA-ADE7C8DD08E8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{40848B7E-1920-4C1D-BF29-36E5F4AA363B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{40D31D56-1F08-4CD3-9609-C95ADC0FBCE3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{41706B06-7D59-4D7E-95AE-9D9866A5F9EB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{41E54594-20AC-4BB8-AF99-FE1D4320E8CB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{422B1461-4716-4A86-A33B-37E397F3FD3D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{431825DC-F7AD-4F37-B6BC-A2ACC5342323}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{43713708-DB38-48F1-AA22-0AD370C7557A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{43782277-F53A-4A3D-8607-981093E0BABE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{43D1F801-23F2-45A9-BB71-F7E109B53005}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{446C84AC-9663-459B-85B1-70EBF69690FD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{448FB194-DCE1-4185-897C-16216380B8E1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{44EC5571-3611-4543-B109-554192FB8C99}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{451CEE24-F6DD-49B2-BB4D-2279413A805D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4592A6FC-F366-48BA-BEEE-C1921E04E52C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{45A10DC2-68BC-46D0-864A-F4711B88D9A0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{46A75DD6-C2EB-4EF1-9A6A-FAC5892610E5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{46B70DBB-D98F-4A87-A381-F6FEA00B1963}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{46D33C98-8321-44F9-B65C-9D84FADF31DF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{47224D8B-7B2D-4313-8601-9210E5A8C08D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4AA1B3CE-6638-4E83-85C2-7DFCFD9145BA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4AC99F91-8BCE-478F-81DB-2D71B2A51AD8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4B01C671-DD54-4EED-B231-2F0729AF89E8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4C3FB42F-1AE2-443A-A0AD-D4C32CC7150A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4C929CDA-BB6C-4182-B2C7-D2CDA0059771}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4CB793E7-FDF8-4A79-BFE6-84F5A3937947}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4D7111B5-B256-4505-B750-4BBB7859B853}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4F4080B8-91ED-4AE2-BACA-EF5A57253859}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{4FB0CF0A-9B48-4709-8648-D99272E4E57B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{50213D51-88AD-4439-9454-4BE1D9CC9E0C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{50F57FEE-3AAE-4A60-B9C5-2ED7696CB325}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{51805077-224A-4E33-8BD5-C3327B2CE787}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{52A2EFBC-B487-42BC-BB2A-6B7745440683}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{52C40D5B-3C25-4C98-8218-A962C24B7583}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{52C7AF0A-E04C-4DB8-AC70-D533F4ADBAF9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{52CA8759-DD8F-4FCE-8B72-6909376874F1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{538859DF-4AC8-4840-81AC-D2931B970D4E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5450D3B1-5605-40C4-9A33-89783BD8A85E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5491B2FE-7130-4342-B7D6-E9284B256486}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5505B2DE-0AE4-4228-96E4-E773B0744B77}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{55142110-A013-43E7-BA76-6D6B4FB4E358}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{554E69F3-4180-4DD1-A7BC-D11C672FC0F5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{559E32B0-48A8-4D04-9478-14B518AA02DC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{56267704-223E-477D-9D9D-1C7E5D0FBCB7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{56767877-43D4-4447-A9DD-B94E371C6553}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{568D3A72-23E5-414D-A8F1-0003A1A549D9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{56B8CC1F-26D7-4213-B904-C3ADC9F46181}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{57249826-1C8A-47C5-A683-B3F502AE1181}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{582131DF-0105-4A74-AB15-B7016FE59F92}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5896D367-E33B-41A1-BB65-BC388F03AA69}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5A1D947F-4F3A-4734-9B1E-2766BED8B45E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5AE04E6E-977D-477F-B1C5-C6377B575DE0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5BBE0C09-F24B-4D53-B2DC-EA263DAB00EC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5CEFA9F0-31B8-4D68-878D-5BD2BE28EA37}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5D2402DF-788A-4349-B2FE-6BD245923C16}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{5F3126EE-6FE1-4CF9-85BE-F8625359E4DC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{602230EC-C9A5-4703-B6CF-5F0FE4E785A7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6040B2A0-6398-4650-8E3C-02F4FF3E8970}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{61385AFC-5FBC-481E-BBC1-B2B7DECAA0B3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{61477A93-319D-4A1C-8E27-6CCA5A5F2CE7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6194FF85-D20B-4E0F-979A-62A0C76041C3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{619C1ACF-E160-4402-939A-A79584916968}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{61E41223-832F-47ED-AA85-2EA4AA9777E4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6229B324-D440-4737-A9ED-C0779B392887}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{63902EE2-FDEF-44C3-99F8-CE0A64FFBF76}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{63903059-8F0F-485A-8A65-F1A7674D0C5B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{642ADF4F-C441-4BD9-A04B-12C1F0F6FA84}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{64C59B72-0047-4725-9B3F-BD57E75F610B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{653C5313-25A0-4145-8CAF-870AF8ECBF59}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{65556E75-65A6-45D1-80BB-399C2DFA9D1F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{65BCEB35-65B2-4FF6-9788-F175C3D09A1C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{65EAD9E2-BD26-48CA-B458-111DDAD2599B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{67EF099B-A591-48FD-87C5-0811AF3635E5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{67FA20C1-0BDF-40B1-BF70-850DEEF7C8F3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{69359BE7-E63B-4348-9DF0-E33C7BF1A185}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{696B7619-1446-4CFA-8B8D-B33E1D776BED}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6AF8FF41-A9E7-4E1C-9D0D-21F1D49F83B1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6B4487C1-5925-467D-9DB6-6C5E1578A134}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6B5A1788-CE7F-4499-86E9-EE82396A5DA4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6E0F576D-EEB9-4331-89D7-17B219F210E2}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6E7160B3-D27A-4B79-9636-EE4F1DB422B4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{6F7FFCEA-FFEA-4A2E-9B61-14D034C02376}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{700B1F52-9B30-4A78-B14E-8898276391FE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7017957C-F6BB-4C1D-BF55-76B261BD23F7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{70547AFE-09BC-46F8-A8F9-95205D58A520}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{70BD7889-5302-4CB4-B4C8-5A8FE58BF19D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{70EF1967-7F38-4016-AD39-B179D4A15343}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{72F89B28-840C-42EC-811A-E57FB8D1D906}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{73526D16-0079-44D6-8694-6C76B6862512}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{741F6DD2-5181-46A6-8814-5A7EF8EA1CEF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{75031AF2-C8D0-4420-AB54-3A0C2672D9F4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{77726528-9571-495E-A8AD-403B0FAB441C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{77F9F506-4973-474B-A803-864EC224B1ED}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7853D833-C25F-4881-B898-E6420E1C3BDB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{79083591-0A7E-4B8B-A329-60563E757171}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{79BC07E7-B6F7-4F65-9417-FFA742E6B633}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7A6023F8-9926-41EF-8A16-AC49D4CCBE67}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7A6FD392-4A07-4D57-AF7A-B438339BE1C4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7AA1A909-6F19-4A95-A891-72566E23A78B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7AB34F21-4AF6-42A0-A546-CF1C7EC5D7ED}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7B32E4EB-FC2C-4D37-9385-20018F8C2A1A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7BB75E42-5594-4C95-9BDC-944C574512B7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7C4F3DC7-CFD9-436E-A4B4-A474BD3271AD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7C836131-E621-4251-ADA6-C5405E9943D0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7D01B0B4-D1E9-40CC-924F-4E4733757F6E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7DC5464F-F181-4E06-AC83-DB065E3610C4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{7EF17D4C-DF1E-4C42-84C8-E31332A71CB5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{806609EC-37E5-4F1B-AB13-3233959D4CA3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{818086C1-85D5-4BF7-93B9-B7F19605091A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{82270347-EB6C-4CAD-9C08-7D3C4DA5D295}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8246061A-25C8-415A-B556-B4CCC455537B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{82E1B410-FF23-4A7F-82AA-A1BF4C1F4603}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{832E27DA-C9AE-4116-9478-1B84E8A9A7DF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{83AE495F-17B0-4B94-80E5-1D972884E852}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{84B24E2E-101F-4F9C-BCA7-61400D623BB1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{85B0C773-B574-4C3C-A5BC-B6AC4967BD92}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{89D8EFD4-F19F-4ED9-A9F4-88BA8F709CB1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8A4CCAE3-5EC9-46FD-89A3-D47C3E939CCA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8A552CA4-03FD-409B-9744-FBC0A68F4355}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8A5E04A2-952C-420A-8906-C1C1549339D5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8AFB0ADE-128B-4047-A8AC-711FB2B20927}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8BE84496-A531-44D6-8425-3ECCBFBD6C77}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8C4082AE-3CFF-4246-BA4A-85D6FBDAA11C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8CBD6F1C-EB72-4825-A9D3-5164582AC402}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8D2CA2E8-C0D4-4F62-A491-A07B9F2B2BBB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8E6DDE84-D1C5-4AF5-BE75-DE7D591844A3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8E823A6C-B568-4D37-B3A5-5F9F0D55F8A7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8ED36970-06E9-404D-8971-F80B4EE87D8C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8EE22359-91AD-4224-A55C-50EC59BE1042}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{8F6CBE3F-AA52-41CB-BEAC-D3B50780FC6E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9024433D-1153-4827-BE8C-39FEFA6EA4EE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{90E11523-6E35-4F57-B334-273A1ECA0685}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{926CDF8C-505A-49E4-ABCB-5652AA07C9B5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{94B9AEBD-2525-45A6-B4F9-E39BB1FC0720}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{94E35163-680D-4B37-9FB7-9DD203609608}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{94E4982D-6929-4507-937B-D293880CDC4F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{953E3805-6209-4BCE-B9CB-D06C312826BA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{95AC1DF2-8517-48B3-915A-935FA2029ABD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{95B77007-5F14-44DC-9D18-ADCD24E04FBA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9609D6E8-6704-475F-8730-6103C6D7B464}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9613E3DD-D730-432B-B021-E32FBDA0FA10}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{975125CC-EA89-4EEC-B880-BE0352FD73A1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{979D6331-808C-4FE2-8723-ED01111A0A35}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{986B00E6-C2D4-4D80-BE16-A04E0EDEE61F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9870C57D-52BF-47B4-BF30-8FD0B8DA6B78}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{98AD249B-5371-4625-A365-E7BA4DC46D33}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{98ED25A0-EBC7-45D5-A3EE-CCBA24F255A8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9A809631-0D7D-4181-B1B4-17596B7D7955}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9B6AC7F5-B8C8-452D-8F32-8C8DEA933F9E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9C2CD87B-B0EB-4145-B485-70CC90D83171}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9C9C445E-D703-4107-844F-06F59D46C7EE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9CCDAF00-39C9-4C3F-94E7-1DACD040CE53}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9E20FB6D-78E2-4CDA-B8BB-B6670EF788E6}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{9F6F64A9-AEAE-42A2-B6EF-3F191ADECF00}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A0069150-47BF-4913-A117-A63052475C59}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A136575B-66F3-4BBC-B36B-619535DFAB70}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A15C1BB0-9BE5-4FCC-AF6D-C2AE8F263AC5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A162857D-A401-462A-8279-74C7E40C1606}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A2304FDB-E480-482C-9A0B-D3164EAF642F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A35A6B83-44DF-47C7-9DC3-C423BCC7384F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A445C246-F413-4FB4-A85B-271CC92CD156}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A459AC8E-5736-4684-B21F-90CDA3B0BC61}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A53FFD20-59C0-46F0-B940-D0617D544B99}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A6855998-5B9C-40A9-BFAE-D28E96ED9B93}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A85205F7-264F-42EC-BD2D-ABEE0D1DCD90}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A8CBEED1-6410-4BFF-A449-9B8F528549BA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A924C454-B218-4388-9891-CA3E4DFF8F3B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{A943AAB4-2D49-450D-946B-4AD5B5132555}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AA16A89B-B692-481C-8A17-D5C9685274F5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{ABCE570A-0A7F-4EAE-8CD0-4C3020652185}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AC04C29E-FEF0-4E4E-916B-036C06A7DA9E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AC3C226D-2FD4-442D-A379-A55B1B4735C6}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{ADA3E8D7-3245-4896-A264-25DBB17A97AF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{ADAB376C-2C66-4461-8C60-C623A9364769}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AE0CF240-7CB8-4859-A76F-F6877FAFDED4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AE9A301D-C609-4208-9544-9E363022A295}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AFC61293-F7EB-4B0C-83C2-F3AA55C8F6F0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{AFFD5D2F-6B18-4A9A-AEEE-DC4BFC960001}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B0ABDD6F-4344-4158-8C1A-DAF7AE8BF17B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B0FB8B54-37FD-4CBC-99B4-B11242552780}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B1060DE4-F77D-473C-A877-AE36DD21040E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B1B6A1D7-F12D-4D92-B276-B8DB9BEDA736}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B2217798-CEB0-444A-A9AB-AAD79828EEF9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B2305014-D649-4BA4-9083-596CCCE75183}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B4054607-1D63-40F5-B24D-5AB2AD6CA381}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B5205E22-60C2-4B3D-AFA3-E5289999170C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B7A9192D-ABCA-437A-8D40-50EF2940AEB1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B7F4A1BC-EF91-48C2-B413-9D5EC3F01537}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B80653BB-D222-41F0-82CB-FE28AD7B9491}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B83824E1-416C-481B-B6BF-AD9A8E41D544}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B8C7AF5F-07F2-49E4-BA5D-C32BBD612A00}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B8CF82E1-91D3-477E-86A4-F942E8CDFF4F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B8F20B85-97A5-4C23-AF9B-493FAB38AA38}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B963D191-B1EC-404D-BD38-DD286FCF9158}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{B9FD603D-9944-4A02-99C7-AC7BC7235552}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BC40EA10-D19C-4C2C-97A1-F6F33888BDEE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BCA6C5AB-E906-4B65-84B3-9B94EF34EFB3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BD1FBCE2-BD00-4254-ADFA-361EF9DFAD3D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BD3095C8-D897-46C7-A3D7-11C73B5FDD9D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BD7E6DDB-0D80-4185-85E6-DCC231F9C695}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BDA4253C-74C1-4AFD-9832-BD3572A15988}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BDD962A2-3528-4AB0-86AD-07F6F56D0F0B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BDE0EB36-0C01-44E1-BB25-8FE68A87C5C8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BF34BB39-727E-492C-99CB-FECCF9FCD5A7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{BFA382E8-7D2F-4E16-97BD-2430646FAFBE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C12BD033-3E8E-4507-B92E-B4A5A65EDCAF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C16B7768-BB5F-4D0A-8F4B-E3AE2BCA2131}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C20877F3-2CAF-4730-8803-83568364213F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C25E409C-8572-482E-9915-4131AAD92A00}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C275FF16-0FDD-4373-9866-BBB0059E01E4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C40C5777-607E-4B1D-9F9B-391BD6132892}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C487158B-EC38-426C-8B50-0C96B62C92FD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C4AC3C6C-D06A-4C33-8FF0-E50BDB81A240}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C4BA7B44-A6A4-41F9-B75E-FCE1DC7EA037}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C4C985B9-64C9-4B1A-A17E-BF36D2D7AA69}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C4D5C126-2F1E-4ECD-AA14-04E7687D99D7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C60769A9-64C3-4818-9A01-1B9C21B29006}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{C6B9F4D0-7964-4497-B35B-2974035DF5DE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CA6879AC-26E6-49AF-905E-DB0162FEF6D3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CAB55942-A975-4F06-933F-15FF7599E66C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CB381B63-4A2E-4CD8-9C61-94DDB97200B3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CB61F03A-3F87-487A-A77C-05F616593755}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CD437C21-217E-4FD3-8EC1-417FC1D24D68}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CDB0C169-AAEE-4023-97A8-2DBB6734C31B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CDCCD451-3801-4C5C-B278-5C174719ABAC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CE280C6D-256E-43C3-99C8-14E3D4607E84}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{CF0E22FF-8C7B-47B2-B8F4-970806468786}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D042BFD9-609D-4E62-AF0B-05458679B947}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D08F93D8-8B09-4034-94B3-E7E8454EDF39}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D0AB540C-9509-49C7-BDCE-3C31306C10DC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D1C7AE45-44CA-4E10-94C5-3FE37A4D2B0E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D2C70837-5A4D-45B9-8C06-0FDBC4D0BDE1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D2E69512-7E9E-4D56-B4F6-A2DC2283DA56}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D49CB460-CC71-40C4-B082-C106CF11BA31}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D5842CFA-75E6-4A0E-9FB2-B4DA07549F46}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D5A04142-0A3B-4311-9BDE-57A7E2993F59}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D640BDF8-F425-4E16-A106-8CE9058A8852}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D79160D8-4772-42A4-BDD3-62C37B44D957}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D7CE441E-A68D-4F54-80BF-B0AAEA268217}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D8467B7E-4125-4E31-9BDF-47BCCF3587A2}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D889F591-99CE-44A8-AA4F-86EA39AA4F0F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{D89056BD-05F4-47E1-BF4A-95BAE428F438}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DA93F660-3B3D-4ECB-A630-EC6738F12C61}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DAB09E57-F468-40CF-8317-43C9E8704BA4}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DADB1F2D-6212-4B7E-B60B-90C278F0F502}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DAE21D0A-6296-46B1-8717-8A8F537A0656}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DB41EABE-0A8C-42DF-B278-75B085937F5D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DBEA959F-0196-48B3-942F-EE375CD9D259}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DC94B233-2142-4994-AAF0-97C36E0D38DC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DD01CFEB-CF4E-4DE8-80BA-0203D61EAD11}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DD04A306-C8DE-4E65-B374-B17639F98EAA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DDD58B1E-712D-4A3C-974A-4377D8F8974F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DE5F9859-137B-424D-B67E-DA2F62781A07}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DECF2263-9F89-4652-A032-13A27ACB4402}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DEF56D5C-1C8C-4CF5-B41B-E66CFFC821A9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DF2072D4-4428-4AF0-9A5E-39D03361EF9A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DF305690-9F3A-4F06-8D4A-C60ED8E20A95}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{DFE519E5-D82C-4587-A0C4-AB5CE9AA9934}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E12B1C64-478D-4AE4-84F0-65EBB85A7AA0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E1844A97-0773-4933-9541-A1452B432A58}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E1986892-56EA-495F-868D-B9DE3B17A5D5}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E1C6E3BE-22DD-4799-AAE4-D6374EB08D11}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E3120E08-1D89-4BF2-87D7-186E7DCDC752}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E3915D9D-9283-4F10-B6B5-5F83A180792B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E3DC2A7C-4E4F-4A0E-9FFC-C0256A544147}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E3DEE826-B123-47F0-A94D-26BCD9D8141A}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E4BA0533-BD06-436E-A8A1-51F288FFD5ED}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E4C0E191-63A6-4681-A077-372126C2E5FF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E63BCDAE-72B6-41D9-A9CC-37853863DBE2}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E6E601E3-7DCF-4256-A9DB-4EF9A5212BB3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E7EC8668-1A04-4A1F-8168-A2C945E2B4AE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{E87EA96D-ECFA-4F84-8B54-2C85566AA746}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EA00C078-22EA-4E62-BE15-827512509CBC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EAB0E7E1-B331-487E-8652-523F739724B3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EAB4A405-AA28-42F5-82C5-A652A3750128}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EAC42D84-E902-47E0-9753-634113CA9DAD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EAE1FD67-3690-4CC9-92A5-221BA09DE18C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EB019B4F-69B3-469A-8B04-E7DEC974038E}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EB87743A-7EA7-44E7-9A8E-A11DA75ECFC1}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EBAE4653-5701-42B3-81B0-A0D33969BAC7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{ED91D572-517B-4499-A985-15022CFF69AB}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EDBE85C1-64A6-4169-B958-7E9660C8B2EC}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EE3D18A8-1936-4C8B-8034-5674959E5F0D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EF114438-CE6E-46E7-9579-467682C36F91}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{EF76D65D-0BF7-4E24-BA23-33B681F4A131}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F007BAAC-9827-43B6-8BFE-FBCEE6BFB89B}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F013AF4A-6B51-479D-85D0-B5F9D879119F}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F0990CB9-01E0-42EB-9ADC-F314E06C2E8C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F0B38ECA-C3BC-4B3A-A149-C64F942117B7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F1D17B54-C703-41CB-989B-9569ED9204BE}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F23016EE-3C3D-4975-BBE3-AA25A38C0135}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F2365D9B-3157-4CC3-8AF2-122BD09A1E29}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F2DC5506-3E83-418C-8C64-4D484612EC91}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F2E3CE3A-0A4D-4D3F-8398-1A2792BC828D}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F3808453-BF91-49C6-8BF9-E04CB8063FCA}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F385F83F-F78E-4615-A510-111CA8A83CBF}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F404D2CB-0EE4-4BD2-A65E-81150720E875}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F472A922-2B9E-4FA1-A815-DEE14881B5D0}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F4980364-ED2B-4DB6-8146-1F51314EC719}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F4FAB872-73F3-4E42-B684-2EFBA3126FCD}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F501CEE8-57F0-453A-863A-2F1FBD0BC360}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F50DBEEA-C776-4B9C-B87B-E0FED83B0D6C}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F58DDB7B-7CB9-424E-9EC8-B42C13369BA9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F6F67AA3-1C5E-4A15-A7B6-B1DDA1CB2CC7}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F78E6E1C-2EAB-492F-A2A3-BEC293D6CEC3}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F7EA6E0D-8305-4AC7-8198-838FB1DBE012}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{F9C1D051-F5A6-451A-91EB-3DC1D828D860}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FA1BCEA6-E1D1-4E75-86DF-C6FC36AB6CD9}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FB3AF3FC-B9EB-46E7-B363-C24BC09DE247}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FBAF2190-0B6A-4714-AAF4-4919D6313FF8}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FBE73058-02B2-404D-B5FF-10ABE17A5166}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FCD4CDFC-CD76-4D56-86B7-C4030136CE47}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FDB2CD55-E084-486A-92D2-319219B57384}
Successfully deleted: [Empty Folder] C:\Users\BooHoo\appdata\local\{FFDCBD56-C5F1-4069-967E-51C6F5F3116C}



~~~ FireFox

Successfully deleted: [File] "C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml"
Successfully deleted: [File] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\v4mj4eoc.default-1347251320671\user.js
Successfully deleted: [File] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\user.js
Successfully deleted: [File] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\v4mj4eoc.default-1347251320671\invalidprefs.js
Successfully deleted: [File] "C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\extensions\isreaditlater@ideashower.com.xpi"
Successfully deleted: [Folder] "C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com"
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\fctb
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\jetpack
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\smartbar
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\v4mj4eoc.default-1347251320671\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
Successfully deleted: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\extensions\userzoom_survey_tool@jetpack
Failed to delete: [Folder] C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\extensions\{8BDEA9D6-6F62-45EB-8EE9-8A81AF0D2F94}
Successfully deleted the following from C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\prefs.js

user_pref("CT2260173.1000234.weatherData", "{\"icon\":\"28.png\",\"temperature\":\"14┬░C\",\"temperatureClear\":\"14┬░C\",\"highTemperature\":\"14┬░C\",\"lowTemperature\":\"8┬
user_pref("CT2260173.embeddedsData", "[{\"appId\":\"128848965243869715\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"get
user_pref("CT2260173.hxxp___www_swagbucks_com.APP_WIN_FEATURES.enc", "c2F2ZWxvY2F0aW9uPTAsc2F2ZXJlc2l6ZWRzaXplPTAsb3BlbnBvc2l0aW9uPWNlbnRlcg==");
user_pref("CT2260173.isPerformedSmartBarTransition", "true");
user_pref("CT2260173.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2260173&octid=CT2260173&SearchSource=15&CUI=UN327795698468191
user_pref("CT2260173.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://SwagBucks.Our
user_pref("CT2260173.search.searchAppId", "128848965243869715");
user_pref("CT2260173.search.searchCount", "2");
user_pref("CT2260173.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://SwagBucks.OurToolbar.com//xpi\"}");
user_pref("CT2260173.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Swag Bucks\"}");
user_pref("CT2260173.smartbar.CTID", "CT2260173");
user_pref("CT2260173.smartbar.Uninstall", "0");
user_pref("CT2260173.smartbar.homepage", true);
user_pref("CT2260173.smartbar.isHidden", false);
user_pref("CT2260173.smartbar.toolbarName", "Swag Bucks ");
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.autoRvrt", "false");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.ffxUnstlRst", true);
user_pref("extensions.BabylonToolbar.id", "8499428e0000000000008c89a5644f4f");
user_pref("extensions.BabylonToolbar.instlDay", "15806");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.newTab", false);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.rvrt", "false");
user_pref("extensions.BabylonToolbar.smplGrp", "none");
user_pref("extensions.BabylonToolbar.tlbrId", "uninst");
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=8499428e0000000000008c89a5644f4f&q=");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10");
user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1011:24:17");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=120351");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.ffxtlbr@babylon.com.install-event-fired", true);
user_pref("extensions.visualbee.tlbrId", "vdelta");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.AutoSearchEventData", "auto%20search");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.ClearCacheDate", 10);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DNSCatch", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DisplayEULA", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.DnsCatchEventData", "dns%20catch");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.EBOMode", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.EnableDCAData_xx", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.EnableDCA_xx", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.FirstLaunchShown", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.InstallDomain", "freecause.com");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.InstallType", "one_click");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.LoadLayoutDate.61465", 10);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.NewTabSearchEventData", "tab%20search");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.ShowRecommendedOptions", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.StateReportDate", "1370813470151");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.TopRightSearchEventData", "top%20right%20search");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeInstallSaved", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeinstall.homepage", "www.google.com");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.beforeinstall.search", "Google");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.engine_img", "aHR0cDovL3MzdG9vbGJhci5mcmVlY2F1c2UuY29tL3lhaG9vX3B1cnBsZV95YmFuZy5wbmc%3D");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.engine_url", "aHR0cDovL3VrLnNlYXJjaC55YWhvby5jb20vc2VhcmNoP291cm1hcms9MSZlaT11dGYtOCZmcj1uZWN0YXItdGIt
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.comp.search.2803282.text", "Search%20to%20Collect%20Nectar%20Points");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.customNewTab", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.dcaDefaultMode", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.dcaShowInstallerPage", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.dcaShowSurvey", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.helpUsImprove", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.hideOthers", true);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.partnerauth", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.processAddrBar", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.restoreSearch", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.", "1365297811");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.123", "61684");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1349989195", "nectar_oct_promo_event_1349989195");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1350010802", "nectar_oct_promo_event_1350010802");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1350055822", "nectar_oct_promo_event_1350055822");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1350404658", "nectar_oct_promo_event_1350404658");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1350759940", "nectar_oct_promo_event_1350759940");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1351454120", "nectar_oct_promo_event_1351454120");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1351530886", "nectar_oct_promo_event_1351530886");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1351534487", "nectar_oct_promo_event_1351534487");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_oct_promo_1351672354", "nectar_oct_promo_event_1351672354");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1348673090", "nectar_sept_promo_1348673090");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1348800110", "nectar_sept_promo_1348800110");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1348981774", "nectar_sept_promo_1348981774");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1349021390", "nectar_sept_promo_1349021390");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1349035789", "nectar_sept_promo_1349035789");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.runcmd.nectar_sept_1349050197", "nectar_sept_promo_1349050197");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.searchHistory", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.session", "53A529442176D5D5A11B38C2AFB986125CCCF65D614FBA1793B6DE7E7B93E1DCD5D2B92C7A2D90C46F3AA27B92525278866A2621A04FA96
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.showFirstLaunchOptions", false);
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.tb_lang", "en");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.tool_id", "61465");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_id", "122057512");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_key", "ddd976eb573a96c29f1792c2e250d2e6bcc3209f");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_layouts", "61465");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.user_lnames", "Nectar%20Search%20Toolbar");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.xml_service_url", "6bb94bbf55fe2f255901a560824a6ebe");
user_pref("freecause841468a1d7f44bd384e6bb0f13a06c64.yahooSearch", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.AutoSearchEventData", "auto%20search");
user_pref("freecausec125f32a02736b7475a148f111c4977c.ClearCacheDate", 10);
user_pref("freecausec125f32a02736b7475a148f111c4977c.DNSCatch", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.DisplayEULA", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.DnsCatchEventData", "dns%20catch");
user_pref("freecausec125f32a02736b7475a148f111c4977c.EBOMode", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.EnableDCAData_xx", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.EnableDCA_xx", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.FirstLaunchShown", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.InstallDomain", "www.maximiles.co.uk");
user_pref("freecausec125f32a02736b7475a148f111c4977c.InstallType", "one_click");
user_pref("freecausec125f32a02736b7475a148f111c4977c.LoadLayoutDate.100799", 10);
user_pref("freecausec125f32a02736b7475a148f111c4977c.MailLastCheckTime", 1370876665);
user_pref("freecausec125f32a02736b7475a148f111c4977c.NewTabSearchEventData", "tab%20search");
user_pref("freecausec125f32a02736b7475a148f111c4977c.ShowRecommendedOptions", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.StateReportDate", "1370813470142");
user_pref("freecausec125f32a02736b7475a148f111c4977c.TopRightSearchEventData", "top%20right%20search");
user_pref("freecausec125f32a02736b7475a148f111c4977c.beforeInstallSaved", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.beforeinstall.homepage", "www.google.com");
user_pref("freecausec125f32a02736b7475a148f111c4977c.beforeinstall.search", "Google");
user_pref("freecausec125f32a02736b7475a148f111c4977c.comp.search.custom_search.engine_img", "aHR0cDovL3Rvb2xiYXJidWlsZGVyLmZyZWVjYXVzZS5jb20uczMuYW1hem9uYXdzLmNvbS9mYXZpY29ucy
user_pref("freecausec125f32a02736b7475a148f111c4977c.comp.search.custom_search.engine_url", "aHR0cDovL3NlcnAuZnJlZWNhdXNlLmNvbS8/c2lkPTEwMDc5OSZjdWlkPSV1c2VybmFtZSZ1c2VyaWQ9JX
user_pref("freecausec125f32a02736b7475a148f111c4977c.comp.search.custom_search.text", "Collect%201%20Maximiles%20Point%20for%20every%202%20Searches");
user_pref("freecausec125f32a02736b7475a148f111c4977c.customNewTab", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.dcaDefaultMode", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.dcaShowInstallerPage", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.dcaShowSurvey", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.helpUsImprove", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.hideOthers", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.partnerauth", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.processAddrBar", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.remove_homepage", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.remove_search", true);
user_pref("freecausec125f32a02736b7475a148f111c4977c.restoreSearch", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.runcmd.", "1351277934");
user_pref("freecausec125f32a02736b7475a148f111c4977c.searchHistory", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.session", "5B7043372B49C591C63B350ADE0CA1AEDC1BB09E9565483ECBEEFAF87E836AABC38AC5078AD186922BA6E18FEDCE8CF9FF3E26EECF7D688
user_pref("freecausec125f32a02736b7475a148f111c4977c.showFirstLaunchOptions", false);
user_pref("freecausec125f32a02736b7475a148f111c4977c.tb_lang", "en");
user_pref("freecausec125f32a02736b7475a148f111c4977c.tool_id", "100799");
user_pref("freecausec125f32a02736b7475a148f111c4977c.user_id", "122057510");
user_pref("freecausec125f32a02736b7475a148f111c4977c.user_key", "e82b8dce75a287cd3aecd8319cf9503264504524");
user_pref("freecausec125f32a02736b7475a148f111c4977c.user_layouts", "100799");
user_pref("freecausec125f32a02736b7475a148f111c4977c.user_lnames", "Maximiles%20Toolbar");
user_pref("freecausec125f32a02736b7475a148f111c4977c.xml_service_url", "6bb94bbf55fe2f255901a560824a6ebe");
user_pref("freecausec125f32a02736b7475a148f111c4977c.yahooSearch", false);
user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2260173&SearchSource=13");
user_pref("smartbar.machineId", "HNLXVZNSYQFKW8XRJFLFJUM/TU6VYHNRLYIUWZFKIHJHCMUGIKN3ATYNBBX89DR3QAJWHGYZDH8GZ09KOI6YVA");
user_pref("smartbar.originalHomepage", "www.google.com");
Emptied folder: C:\Users\BooHoo\AppData\Roaming\mozilla\firefox\profiles\y2tjhgft.Default User\minidumps [132 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06/10/2013 at 16:30:33.56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




All processes killed
========== OTL ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\BooHoo\Desktop\cmd.bat deleted successfully.
C:\Users\BooHoo\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: BooHoo
->Temp folder emptied: 40119001 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 13721912 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 492 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: postgres

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1454 bytes
RecycleBin emptied: 317315 bytes

Total Files Cleaned = 52.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06102013_235510

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\GacelaLSPService.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
  • 0

#4
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
Please run Farbars Recovery Scan tool - see my last post.

We need to check for a rootkit infection that often comes with the type of infection shown on this machine.
  • 0

#5
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
Sorry about that, here are the additional logs you requested.


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-06-2013
Ran by BooHoo (administrator) on 11-06-2013 00:35:45
Running from C:\Users\BooHoo\Downloads
Windows 7 Ultimate Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieSvc.exe
(Lavasoft Limited) C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe
(Epitiro Ltd.) C:\Program Files\Broadband Test Application\BroadbandTestApp.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe
(GfK) C:\Program Files\GfKLSPService\GfKLSPService.exe
(Eastman Kodak Company) C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
( ) C:\Windows\system32\lxcrcoms.exe
() C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Capture.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Epitiro Ltd.) C:\Program Files\Broadband Test Application\BroadbandTestApp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Eastman Kodak Company) C:\Program Files\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
() C:\Program Files\GfKLSPService\GfK-WatchDog.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieCtrl.exe
(Ipsos) C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Lavasoft Limited) C:\PROGRA~1\AD-AWA~1\AdAware.exe
(GFI Software) C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Ipsos) C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusNet.exe
(Ipsos) C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusNet.exe
(PokerStars) C:\Program Files\PokerStars\PokerStars.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [EKStatusMonitor] C:\Program Files\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM\...\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [] [x]
HKLM\...\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [825560 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [GfK-WatchDog] "C:\Program Files\GfKLSPService\GfK-WatchDog.exe" /Debug [58848 2013-03-27] ()
HKLM\...\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-03-28] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] ()
HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" [542632 2013-01-31] (Lavasoft)
HKLM\...\Run: [Ad-Aware Antivirus] "C:\Program Files\Ad-Aware Antivirus\AdAwareLauncher" --windows-run [x]
HKCU\...\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [109784 2013-02-15] (Siber Systems)
HKCU\...\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE" [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart [19662744 2013-04-16] (Google)
HKCU\...\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe" [545552 2012-12-16] (SANDBOXIE L.T.D)
HKCU\...\Run: [Panel+] C:\Users\BooHoo\AppData\Local\Panel+\service\PanelPlusService.exe [140880 2013-02-21] (Ipsos)
HKCU\...\Policies\system: [DisableCMD] 0
HKCU\...\Policies\system: [NoDispAppearancePage] 0
HKCU\...\Policies\system: [NoDispBackgroundPage] 0
HKCU\...\Policies\system: [NoDispSettingsPage] 0
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKCU\...\Policies\Explorer: [NoDesktop] 0
HKU\Guest\...\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [x]
HKU\Guest\...\Run: [AdobeBridge] [x]
HKU\Guest\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [ 2013-04-19] (Skype Technologies S.A.)
HKU\Guest\...\Policies\system: [DisableCMD] 0
HKU\Guest\...\Policies\system: [NoDispAppearancePage] 0
HKU\Guest\...\Policies\system: [NoDispBackgroundPage] 0
HKU\Guest\...\Policies\system: [NoDispSettingsPage] 0
Startup: C:\Users\BooHoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=localhost:44413
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?r...opt=0&ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: GfK Internet-Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files\GfK Internet-Monitor\Gacela2.dll (GfK)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKCU -&RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKCU -Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {EBB176D2-AF75-4706-832F-4C8448F72757} http://www.shopandsc.../TNSClickrc.CAB
Handler: ipp - No CLSID Value -
Handler: msdaipp - No CLSID Value -
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\system32\GfKLSPService.DLL [145648] (Microsoft Corp.)
Winsock: Catalog9 02 C:\Windows\system32\GfKLSPService.DLL [145648] (Microsoft Corp.)
Winsock: Catalog9 03 C:\Windows\system32\GfKLSPService.DLL [145648] (Microsoft Corp.)
Winsock: Catalog9 04 C:\Windows\system32\GfKLSPService.DLL [145648] (Microsoft Corp.)
Winsock: Catalog9 15 C:\Windows\system32\GfKLSPService.DLL [232448] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\i1h185fb.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll No File
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=1.1.11 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\i1h185fb.default\Extensions\userzoom_survey_tool@jetpack

Chrome:
=======
CHR HomePage: hxxp://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=84998C89A5644F4F
CHR RestoreOnStartup: "hxxp://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=84998C89A5644F4F"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Gacela Plugin) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef\12.1.1136_0\plugin/npgacela.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Coupons Inc., Coupon Printer Manager ) - C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll No File
CHR Plugin: (Coupons Inc., Coupon Printer Manager ) - C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java™ Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll No File
CHR Extension: (Google Drive) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (GfK Internet-Monitor) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef\13.1.49_0
CHR Extension: (Panel+) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaomfkhlibpgkpmjjkfjpfjhebhbgcah\5.3.5_0
CHR Extension: (Skype Click to Call) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.4.0.11328_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0
CHR Extension: (Gmail) - C:\Users\BooHoo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

========================== Services (Whitelisted) =================

R2 Ad-Aware Service; C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-03-18] (Lavasoft Limited)
R2 bbtest_svc; C:\Program Files\Broadband Test Application\BroadbandTestApp.exe [815104 2012-02-29] (Epitiro Ltd.)
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [3020768 2013-03-27] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1376224 2013-03-27] ()
R2 GfKLSPService; C:\Program Files\GfKLSPService\GfKLSPService.exe [3300320 2013-03-27] (GfK)
R2 Kodak AiO Network Discovery Service; C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe [395200 2012-10-19] (Eastman Kodak Company)
R2 Kodak AiO Status Monitor Service; C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [779200 2012-10-15] (Eastman Kodak Company)
R2 lxcr_device; C:\Windows\system32\lxcrcoms.exe [537520 2006-12-11] ( )
R2 M4-Service; C:\Users\BooHoo\AppData\Roaming\Mikogo 4\M4-Service.exe [1007472 2012-01-16] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SBAMSvc; C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [85776 2012-12-16] (SANDBOXIE L.T.D)
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3290304 2012-11-22] (Skype Technologies S.A.)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2011-08-19] (Logitech Inc.)
R2 pgsql-8.3; "C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe" runservice -w -N "pgsql-8.3" -D "C:\Program Files\PostgreSQL\8.3\data\" [x]

==================== Drivers (Whitelisted) ====================

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14216 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [8456 2011-07-29] ()
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41584 2013-04-11] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [13560 2013-05-09] (GFI Software)
S3 hitmanpro36; C:\Windows\system32\drivers\hitmanpro36.sys [27424 2012-09-12] ()
R3 KMWDFILTERx86; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows ® Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
S3 optousb; C:\Windows\System32\DRIVERS\optousb.sys [22016 2010-03-24] (OPTO ELECTRONICS CO.,LTD.)
S3 optovcm; C:\Windows\System32\DRIVERS\optovcm.sys [28160 2010-03-24] (OPTO ELECTRONICS CO.,LTD.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15576 2012-08-20] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10200 2012-08-20] ()
R1 pwipf6; C:\Windows\System32\DRIVERS\pwipf6.sys [117104 2011-07-21] (Privacyware/PWI, Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [45968 2011-11-03] (Rovi Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [66344 2012-09-12] (GFI Software)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [157776 2012-12-16] (SANDBOXIE L.T.D)
R2 ssfmonm; C:\Windows\System32\DRIVERS\ssfmonm.sys [45584 2011-05-18] (Webroot Software, Inc. (www.webroot.com))
R0 sshrmd; C:\Windows\System32\DRIVERS\sshrmd.sys [24496 2011-05-18] (Webroot Software, Inc. (www.webroot.com))
R0 ssidrv; C:\Windows\System32\DRIVERS\ssidrv.sys [181008 2011-05-18] (Webroot Software, Inc. (www.webroot.com))
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-04-06] (AnchorFree Inc)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1149552 2010-10-01] (VIA Technologies, Inc.)
S3 MFE_RR; \??\C:\Users\BooHoo\AppData\Local\Temp\mfe_rr.sys [x]
S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [x]
S3 NLNdisMP; system32\DRIVERS\nlndis.sys [x]
S3 NLNdisPT; system32\DRIVERS\nlndis.sys [x]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-11 00:35 - 2013-06-11 00:35 - 00000000 ____D C:\FRST
2013-06-11 00:34 - 2013-06-11 00:35 - 01358933 ____A (Farbar) C:\Users\BooHoo\Downloads\FRST.exe
2013-06-10 23:52 - 2013-06-11 00:28 - 00000000 ____D C:\Users\BooHoo\AppData\Local\adawarebp
2013-06-10 23:51 - 2013-06-10 23:57 - 00000280 ____A C:\Windows\setupact.log
2013-06-10 23:51 - 2013-06-10 23:51 - 00000000 ____A C:\Windows\setuperr.log
2013-06-10 23:33 - 2013-06-10 23:33 - 00000000 ____D C:\_OTL
2013-06-10 16:30 - 2013-06-10 16:30 - 00070316 ____A C:\Users\BooHoo\Desktop\JRT.txt
2013-06-10 16:25 - 2013-06-10 16:25 - 00000000 ____D C:\Windows\ERUNT
2013-06-10 16:24 - 2013-06-10 16:24 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\BooHoo\Downloads\JRT.exe
2013-06-10 16:24 - 2013-06-10 16:24 - 00000000 ____D C:\JRT
2013-06-10 16:11 - 2013-06-10 16:11 - 00000000 ____D C:\Program Files\ESET
2013-06-10 16:10 - 2013-06-10 16:10 - 02347384 ____A (ESET) C:\Users\BooHoo\Downloads\esetsmartinstaller_enu.exe
2013-06-10 06:38 - 2013-06-10 06:38 - 00002217 ____A C:\Users\Public\Desktop\PokerStrategy.com Equilab.lnk
2013-06-10 06:37 - 2013-06-10 06:37 - 00000000 ____D C:\Program Files\PokerStrategy.com
2013-06-10 06:33 - 2013-06-10 06:33 - 03839648 ____A (Piriform Ltd) C:\Users\BooHoo\Downloads\dfsetup214.exe
2013-06-10 06:33 - 2013-06-10 06:33 - 00000000 ____D C:\Program Files\Defraggler
2013-06-09 21:46 - 2013-06-09 21:46 - 00000000 ____D C:\ProgramData\globant english
2013-06-09 21:45 - 2013-06-09 21:45 - 00000000 ____D C:\Users\BooHoo\Desktop\ShopandScan
2013-06-09 21:45 - 2013-06-09 21:45 - 00000000 ____D C:\Users\BooHoo\Desktop\New folder
2013-06-09 21:43 - 2013-06-09 21:43 - 00000000 ____D C:\opticon_driver
2013-06-09 01:45 - 2013-06-09 01:47 - 16836932 ____A C:\Users\BooHoo\Downloads\Dawn.zip
2013-06-08 04:35 - 2013-06-07 21:12 - 15413853 ____A C:\Users\Guest\Desktop\2013-06-06 20-19-11.271.wmv
2013-06-07 21:10 - 2013-06-07 21:12 - 15413853 ____A C:\Users\BooHoo\Documents\2013-06-06 20-19-11.271.wmv
2013-06-06 05:13 - 2013-06-06 05:57 - 00147970 ____A C:\Users\BooHoo\Desktop\OTL.Txt
2013-06-06 04:59 - 2013-06-06 04:59 - 00602112 ____A (OldTimer Tools) C:\Users\BooHoo\Desktop\OTL.exe
2013-06-05 01:08 - 2013-06-05 01:09 - 00131520 ____A C:\Users\BooHoo\Desktop\Funeral - Order of Service.one
2013-05-28 05:46 - 2013-05-28 05:46 - 00000000 ____D C:\Users\BooHoo\Documents\Adobe
2013-05-28 02:03 - 2013-05-28 02:03 - 00000000 ____D C:\Users\Guest\Desktop\Footprints - Care2 eCards, Free Online Animated Greeting Cards - From Maureen - 18-05-13_files
2013-05-28 02:03 - 2013-05-25 19:17 - 00077108 ____A C:\Users\Guest\Desktop\Footprints - Care2 eCards, Free Online Animated Greeting Cards - From Maureen - 18-05-13.htm
2013-05-24 05:10 - 2012-03-13 09:33 - 734713856 ____A C:\Users\Guest\Desktop\Tucker And Dale vs Evil (2010).avi
2013-05-24 05:06 - 2012-04-16 04:52 - 734474240 ____A C:\Users\Guest\Desktop\Horrible Bosses.avi
2013-05-19 22:05 - 2013-05-19 22:08 - 00000000 ____D C:\Users\BooHoo\Desktop\Flumpy
2013-05-19 21:09 - 2013-05-19 21:09 - 14323712 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 02877440 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-19 21:09 - 2013-05-19 21:09 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 01767424 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 01441280 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-19 21:09 - 2013-05-19 21:09 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-19 21:09 - 2013-05-19 21:09 - 01130496 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00745472 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00719360 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00690688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00629248 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00493056 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-19 21:09 - 2013-05-19 21:09 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00242200 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00185344 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00150528 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00138752 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00137216 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00125440 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00117248 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00110592 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00079872 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00073728 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00069120 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-19 21:09 - 2013-05-19 21:09 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00057344 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00042496 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00023040 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-19 21:08 - 2013-05-19 21:08 - 03419136 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 02284544 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01988096 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01504768 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01247744 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01158144 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01080832 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00906240 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00604160 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00417792 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00364544 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00293376 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00249856 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00207872 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00187392 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00161792 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-19 20:33 - 2013-05-19 20:33 - 00000134 ____A C:\Users\BooHoo\Desktop\Internet Explorer Troubleshooting.url
2013-05-19 17:09 - 2013-06-05 11:49 - 00000000 ____D C:\Users\BooHoo\Desktop\Dance With my Father
2013-05-16 00:44 - 2013-05-16 00:44 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Panel+
2013-05-16 00:43 - 2013-05-16 00:43 - 00000000 ____D C:\Users\BooHoo\AppData\Local\Panel+
2013-05-16 00:03 - 2013-05-16 00:03 - 08334640 ____A (Ipsos) C:\Users\BooHoo\Downloads\IpsosPanelPlusSetup.exe
2013-05-15 21:26 - 2013-05-15 21:26 - 00000000 ____D C:\Users\BooHoo\AppData\Local\Ancestry.com
2013-05-15 05:39 - 2013-04-10 06:18 - 00728424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-15 05:39 - 2013-04-10 06:18 - 00218984 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-15 05:39 - 2013-04-10 04:14 - 02347520 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-15 05:39 - 2013-02-27 06:05 - 00101720 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-15 05:39 - 2013-02-27 05:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-15 05:39 - 2013-02-27 05:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-15 05:39 - 2013-02-27 05:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-15 05:39 - 2013-02-27 05:49 - 00047104 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-14 19:04 - 2013-05-14 19:04 - 16948616 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe
2013-05-12 06:28 - 2013-05-12 06:28 - 00000000 ____D C:\Users\Guest\AppData\Local\adawarebp

==================== One Month Modified Files and Folders ========

2013-06-11 00:37 - 2012-01-13 01:38 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Skype
2013-06-11 00:35 - 2013-06-11 00:35 - 00000000 ____D C:\FRST
2013-06-11 00:35 - 2013-06-11 00:34 - 01358933 ____A (Farbar) C:\Users\BooHoo\Downloads\FRST.exe
2013-06-11 00:28 - 2013-06-10 23:52 - 00000000 ____D C:\Users\BooHoo\AppData\Local\adawarebp
2013-06-11 00:28 - 2013-03-27 18:20 - 00000000 ____D C:\Program Files\GfKLSPService
2013-06-11 00:27 - 2012-05-11 05:35 - 00000000 ____D C:\Program Files\GfK Internet-Monitor
2013-06-11 00:25 - 2013-04-12 04:28 - 00000000 ____D C:\Program Files\PokerTracker 3
2013-06-11 00:23 - 2012-01-13 01:20 - 00000000 ____D C:\Users\BooHoo\AppData\Local\PokerStars
2013-06-11 00:04 - 2012-06-23 22:55 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-11 00:00 - 2012-02-29 17:25 - 00000000 ____D C:\ProgramData\Epitiro
2013-06-10 23:58 - 2013-05-09 18:10 - 00001826 ____A C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-06-10 23:58 - 2013-04-06 20:36 - 00000000 ___SD C:\Users\BooHoo\Google Drive
2013-06-10 23:58 - 2012-09-25 19:27 - 00000882 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-10 23:58 - 2012-02-29 17:27 - 00000444 ____A C:\Windows\Tasks\IsposureAgent.job
2013-06-10 23:58 - 2012-02-29 17:25 - 00000000 ____D C:\Program Files\Broadband Test Application
2013-06-10 23:57 - 2013-06-10 23:51 - 00000280 ____A C:\Windows\setupact.log
2013-06-10 23:57 - 2012-08-04 16:35 - 00000000 ____D C:\ProgramData\Kodak
2013-06-10 23:57 - 2009-07-14 05:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-10 23:55 - 2013-04-11 21:27 - 01075843 ____A C:\Windows\WindowsUpdate.log
2013-06-10 23:55 - 2009-07-14 05:34 - 00026112 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-10 23:55 - 2009-07-14 05:34 - 00026112 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-10 23:51 - 2013-06-10 23:51 - 00000000 ____A C:\Windows\setuperr.log
2013-06-10 23:49 - 2012-09-25 19:27 - 00000886 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-10 23:33 - 2013-06-10 23:33 - 00000000 ____D C:\_OTL
2013-06-10 23:33 - 2012-09-12 17:23 - 1107502080 ____A C:\Users\BooHoo\Documents\Outlook Backup - 12-09-12.pst
2013-06-10 16:30 - 2013-06-10 16:30 - 00070316 ____A C:\Users\BooHoo\Desktop\JRT.txt
2013-06-10 16:25 - 2013-06-10 16:25 - 00000000 ____D C:\Windows\ERUNT
2013-06-10 16:24 - 2013-06-10 16:24 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\BooHoo\Downloads\JRT.exe
2013-06-10 16:24 - 2013-06-10 16:24 - 00000000 ____D C:\JRT
2013-06-10 16:11 - 2013-06-10 16:11 - 00000000 ____D C:\Program Files\ESET
2013-06-10 16:10 - 2013-06-10 16:10 - 02347384 ____A (ESET) C:\Users\BooHoo\Downloads\esetsmartinstaller_enu.exe
2013-06-10 14:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-06-10 07:58 - 2012-01-17 20:46 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Winamp
2013-06-10 06:50 - 2012-01-10 00:20 - 00000000 ____D C:\users\BooHoo
2013-06-10 06:39 - 2012-09-03 22:23 - 00000000 ____D C:\Users\BooHoo\AppData\Local\CrashDumps
2013-06-10 06:39 - 2012-03-09 23:41 - 00000000 ____D C:\Windows\Minidump
2013-06-10 06:39 - 2012-02-11 04:21 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Azureus
2013-06-10 06:39 - 2012-01-10 08:11 - 00000000 ____D C:\Windows\Panther
2013-06-10 06:38 - 2013-06-10 06:38 - 00002217 ____A C:\Users\Public\Desktop\PokerStrategy.com Equilab.lnk
2013-06-10 06:37 - 2013-06-10 06:37 - 00000000 ____D C:\Program Files\PokerStrategy.com
2013-06-10 06:33 - 2013-06-10 06:33 - 03839648 ____A (Piriform Ltd) C:\Users\BooHoo\Downloads\dfsetup214.exe
2013-06-10 06:33 - 2013-06-10 06:33 - 00000000 ____D C:\Program Files\Defraggler
2013-06-10 05:54 - 2013-04-11 21:39 - 00001798 ____A C:\Windows\Sandboxie.ini
2013-06-10 02:00 - 2013-04-21 19:39 - 00000000 ____D C:\Users\BooHoo\AppData\Local\Adobe
2013-06-09 21:46 - 2013-06-09 21:46 - 00000000 ____D C:\ProgramData\globant english
2013-06-09 21:45 - 2013-06-09 21:45 - 00000000 ____D C:\Users\BooHoo\Desktop\ShopandScan
2013-06-09 21:45 - 2013-06-09 21:45 - 00000000 ____D C:\Users\BooHoo\Desktop\New folder
2013-06-09 21:43 - 2013-06-09 21:43 - 00000000 ____D C:\opticon_driver
2013-06-09 21:25 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\NDF
2013-06-09 01:47 - 2013-06-09 01:45 - 16836932 ____A C:\Users\BooHoo\Downloads\Dawn.zip
2013-06-08 14:10 - 2013-01-26 15:58 - 00000000 ____D C:\Users\Guest\AppData\Roaming\vlc
2013-06-08 04:34 - 2012-09-07 15:33 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\vlc
2013-06-08 02:02 - 2012-01-20 05:17 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\mIRC
2013-06-07 21:12 - 2013-06-08 04:35 - 15413853 ____A C:\Users\Guest\Desktop\2013-06-06 20-19-11.271.wmv
2013-06-07 21:12 - 2013-06-07 21:10 - 15413853 ____A C:\Users\BooHoo\Documents\2013-06-06 20-19-11.271.wmv
2013-06-06 15:02 - 2012-04-14 20:08 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-06 15:02 - 2012-01-13 01:25 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-06 05:57 - 2013-06-06 05:13 - 00147970 ____A C:\Users\BooHoo\Desktop\OTL.Txt
2013-06-06 04:59 - 2013-06-06 04:59 - 00602112 ____A (OldTimer Tools) C:\Users\BooHoo\Desktop\OTL.exe
2013-06-05 11:49 - 2013-05-19 17:09 - 00000000 ____D C:\Users\BooHoo\Desktop\Dance With my Father
2013-06-05 01:09 - 2013-06-05 01:08 - 00131520 ____A C:\Users\BooHoo\Desktop\Funeral - Order of Service.one
2013-06-04 23:37 - 2013-04-20 06:29 - 00000000 ____D C:\Users\BooHoo\.matplotlib
2013-05-30 23:38 - 2009-07-14 05:33 - 03838424 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-28 16:30 - 2012-01-14 16:04 - 00000000 ____D C:\Users\Guest\Desktop\Rob
2013-05-28 15:28 - 2013-04-27 09:50 - 00000000 ____D C:\Users\Guest\AppData\Local\Adobe
2013-05-28 15:28 - 2012-01-14 13:55 - 00114832 ____A C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-05-28 05:55 - 2012-09-03 20:36 - 00000000 ____D C:\Users\Public\Documents\Adobe
2013-05-28 05:46 - 2013-05-28 05:46 - 00000000 ____D C:\Users\BooHoo\Documents\Adobe
2013-05-28 05:44 - 2012-02-11 00:30 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-05-28 05:41 - 2012-01-14 19:02 - 00000000 ____D C:\Program Files\Adobe
2013-05-28 05:41 - 2012-01-13 01:25 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Adobe
2013-05-28 05:40 - 2012-01-17 20:46 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2013-05-28 05:40 - 2012-01-14 19:02 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-05-28 05:36 - 2012-12-09 23:45 - 00000000 ____D C:\Users\BooHoo\Downloads\1 - COMPLETED
2013-05-28 04:49 - 2012-01-14 19:01 - 00000000 ____D C:\ProgramData\Adobe
2013-05-28 04:38 - 2012-01-13 01:21 - 00114832 ____A C:\Users\BooHoo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-05-28 02:03 - 2013-05-28 02:03 - 00000000 ____D C:\Users\Guest\Desktop\Footprints - Care2 eCards, Free Online Animated Greeting Cards - From Maureen - 18-05-13_files
2013-05-25 19:17 - 2013-05-28 02:03 - 00077108 ____A C:\Users\Guest\Desktop\Footprints - Care2 eCards, Free Online Animated Greeting Cards - From Maureen - 18-05-13.htm
2013-05-23 15:08 - 2012-08-21 13:19 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Ad-Aware Antivirus
2013-05-19 22:08 - 2013-05-19 22:05 - 00000000 ____D C:\Users\BooHoo\Desktop\Flumpy
2013-05-19 21:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\zh-TW
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\zh-HK
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\zh-CN
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\tr-TR
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\sv-SE
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\ru-RU
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\pt-PT
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\pt-BR
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\pl-PL
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\nl-NL
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\nb-NO
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\ko-KR
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\ja-JP
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\it-IT
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\hu-HU
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\fr-FR
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\fi-FI
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\el-GR
2013-05-19 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-05-19 21:09 - 2013-05-19 21:09 - 14323712 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 02877440 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-19 21:09 - 2013-05-19 21:09 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 01767424 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 01441280 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-19 21:09 - 2013-05-19 21:09 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-19 21:09 - 2013-05-19 21:09 - 01130496 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00745472 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00719360 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00690688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00629248 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00493056 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00361984 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-19 21:09 - 2013-05-19 21:09 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00242200 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00232960 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00204800 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00185344 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00150528 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00138752 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00137216 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00125440 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00117248 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00110592 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00079872 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00073728 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00069120 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00061952 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-19 21:09 - 2013-05-19 21:09 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00057344 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00042496 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00038400 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00023040 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-19 21:09 - 2013-05-19 21:09 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-19 21:09 - 2013-05-19 21:09 - 00011776 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-19 21:08 - 2013-05-19 21:08 - 03419136 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 02284544 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01988096 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01504768 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01247744 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01158144 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 01080832 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00906240 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00604160 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00417792 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00364544 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00293376 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00249856 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00207872 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00187392 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00161792 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-19 21:08 - 2013-05-19 21:08 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-19 20:44 - 2010-11-20 22:01 - 00796600 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-19 20:43 - 2012-09-12 17:54 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-19 20:37 - 2012-01-13 15:45 - 72607752 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-19 20:33 - 2013-05-19 20:33 - 00000134 ____A C:\Users\BooHoo\Desktop\Internet Explorer Troubleshooting.url
2013-05-18 20:12 - 2013-04-11 20:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-05-18 20:12 - 2012-05-25 15:50 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-05-17 07:37 - 2013-02-26 08:59 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Skype
2013-05-17 07:37 - 2012-01-13 01:32 - 00000000 ____D C:\ProgramData\Skype
2013-05-17 07:36 - 2012-11-11 23:40 - 00000000 ___RD C:\Program Files\Skype
2013-05-16 17:26 - 2009-07-14 05:53 - 00032544 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-05-16 00:44 - 2013-05-16 00:44 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\Panel+
2013-05-16 00:43 - 2013-05-16 00:43 - 00000000 ____D C:\Users\BooHoo\AppData\Local\Panel+
2013-05-16 00:03 - 2013-05-16 00:03 - 08334640 ____A (Ipsos) C:\Users\BooHoo\Downloads\IpsosPanelPlusSetup.exe
2013-05-15 22:20 - 2012-12-22 02:06 - 00000000 ____D C:\Users\BooHoo\Documents\Family Tree Maker
2013-05-15 22:01 - 2012-12-27 21:14 - 00000000 ____D C:\Users\BooHoo\AppData\Roaming\FamilyTreeMaker
2013-05-15 21:26 - 2013-05-15 21:26 - 00000000 ____D C:\Users\BooHoo\AppData\Local\Ancestry.com
2013-05-14 19:04 - 2013-05-14 19:04 - 16948616 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe
2013-05-14 09:32 - 2013-05-09 18:20 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-05-12 06:28 - 2013-05-12 06:28 - 00000000 ____D C:\Users\Guest\AppData\Local\adawarebp

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-10 14:47

==================== End Of Log ============================


Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-06-2013
Ran by BooHoo at 2013-06-11 00:37:43 Run:
Running from C:\Users\BooHoo\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Ad-Aware Antivirus (Version: 10.5.2.4379)
Ad-Aware Browsing Protection (Version: 1.0.1.94)
Adobe Acrobat X Pro - English, Franšais, Deutsch (Version: 10.1.6)
Adobe AIR (Version: 3.1.0.4880)
Adobe Content Viewer (Version: 1.4.0)
Adobe Creative Suite 5.5 Master Collection (Version: 5.5)
Adobe Creative Suite 6 Master Collection (Version: 6)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.202)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Help Manager (Version: 4.0.244)
Adobe Reader X (10.1.7) (Version: 10.1.7)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
Adobe Widget Browser (Version: 2.0 Build 230)
Adobe Widget Browser (Version: 2.0.230)
aioscnnr (Version: 7.3.4.0)
Amazon MP3 Downloader 1.0.9
Apple Software Update (Version: 2.0.0.21)
AudibleManager (Version: 2009029232.48.56.2952426)
Bingo Cafe UK
BingoCabin
BingoLinerUK
bl (Version: 1.0.0)
Broadband Test Application (Version: 2.5.2.3)
Bundled software uninstaller
C4USelfUpdater (Version: 1.00.0000)
Camtasia Studio 8 (Version: 8.0.2.918)
CCleaner (Version: 4.00)
center (Version: 6.2.5.0)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Cool Edit Pro 2.1
Coupon Printer for Windows (Version: 5.0.0.1)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Defraggler (Version: 2.14)
DivX Setup (Version: 2.6.1.28)
EASEUS Partition Master 9.1.0 Home Edition
ESET Online Scanner v3
essentials (Version: 6.0.14.0)
Family Tree Maker 2012 (Version: 21.0.388)
FileHippo.com Update Checker
Free FLV to MP3 Converter
Full Tilt Poker (Version: 4.48.2.WIN.FullTilt.COM)
GfK Internet-Monitor (Version: 12.1.1096)
Google Chrome (Version: 27.0.1453.110)
Google Drive (Version: 1.9.4536.8202)
Google Update Helper (Version: 1.3.21.145)
ID3-TagIT 3 (Version: 3)
Intel® Graphics Media Accelerator Driver
Intel® TV Wizard
InterCasino
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
JavaFX 2.1.1 (Version: 2.1.1)
JDownloader 0.9 (Version: 0.9)
Keynote Connector
KingJackpot
Kodak AIO Printer (Version: 7.0.3.0)
KODAK AiO Software (Version: 7.6.12.20)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Messenger Plus! 5 (Version: 5.50.0.761)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 8.0.50727.42)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Microsoft_VC80_ATL_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (Version: 1.00.0000)
Mikogo 4 (Version: 4.4)
mIRC (Version: 7.29)
Mobipocket Reader 6.2 (Version: 6.2.608)
Movie Maker (Version: 16.4.3505.0912)
Mozilla Firefox 21.0 (x86 en-GB) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
ocr (Version: 6.2.3.50)
Office 2010 Trial Extender (Version: 1.0.0.5)
Panel+ (Version: 5.3.5)
PDF Settings CS5 (Version: 10.0)
PDFMate Free PDF Merger 1.0.4
ph (Version: 1.0.0)
Photo Gallery (Version: 16.4.3505.0912)
PKRCasino
Platform (Version: 1.34)
PokerStars
PokerStove version 1.24
PokerStrategy.com Equilab (Version: 1.2.8.0)
PokerTracker 3 (remove only)
PostgreSQL 8.3 (Version: 8.3)
PreReq (Version: 6.2.4.0)
PrintProjects (Version: 1.0.0.9282)
PxMergeModule (Version: 1.00.0000)
QuickTime (Version: 7.2.0.240)
RoboForm 7-8-6-5 (All Users) (Version: 7-8-6-5)
RummyRoyal.com (Version: 20.1)
Sandboxie 3.76 (32-bit) (Version: 3.76)
Serif WebPlus Starter Edition 3 (Version: 3.0.0.005)
Skype Click to Call (Version: 6.4.11328)
SkypeÖ 6.3 (Version: 6.3.107)
Slot of Vegas (Version: 11.1.0)
Snagit 11 (Version: 11.2.0)
swMSM (Version: 12.0.0.1)
TeamViewer 8 (Version: 8.0.18051)
Ubuntu (Version: 11.10-rev241)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VIA Platform Device Manager (Version: 1.34)
VirtualCloneDrive
VLC media player 2.0.2 (Version: 2.0.2)
Vuze (Version: 4.8.1.0)
Winamp (Version: 5.63 )
Winamp Detector Plug-in (Version: 1.0.0.1)
Windows Live Communications Platform (Version: 16.4.3505.0912)
Windows Live Essentials (Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3505.0912)
Windows Live Messenger (Version: 16.4.3505.0912)
Windows Live Photo Common (Version: 16.4.3505.0912)
Windows Live PIMT Platform (Version: 16.4.3505.0912)
Windows Live SOXE (Version: 16.4.3505.0912)
Windows Live SOXE Definitions (Version: 16.4.3505.0912)
Windows Live UX Platform (Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series (Version: 9.00.2980)
WinRAR 4.20 (32-bit) (Version: 4.20.0)
xplorer▓ lite 32 bit (Version: 2.1.0.2)
Yahoo! Messenger
Yahoo! Software Update
ZoneAlarm LTD Toolbar

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Blue Snowball
Description: USB Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: (Generic USB Audio)
Service: usbaudio
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/10/2013 11:58:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 11:57:17 PM) (Source: Microsoft-Windows-User Profiles Service) (User: BooHoo-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

Error: (06/10/2013 11:57:17 PM) (Source: Microsoft-Windows-User Profiles Service) (User: BooHoo-PC)
Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Error: (06/10/2013 11:52:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 11:51:58 PM) (Source: Microsoft-Windows-User Profiles Service) (User: BooHoo-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

Error: (06/10/2013 11:51:57 PM) (Source: Microsoft-Windows-User Profiles Service) (User: BooHoo-PC)
Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Error: (06/10/2013 11:28:09 PM) (Source: Application Hang) (User: )
Description: The program DllHost.exe version 6.1.7600.16385 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 11cc

Start Time: 01ce6629851c6932

Termination Time: 60000

Application Path: C:\Windows\system32\DllHost.exe

Report Id: d782575b-d21c-11e2-94e0-8c89a5644f4f

Error: (06/10/2013 10:40:43 PM) (Source: Windows Search Service) (User: )
Description: Unable to initialize the filter host process. Terminating.


Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)

Error: (06/10/2013 10:35:36 PM) (Source: Windows Search Service) (User: )
Description: Unable to initialize the filter host process. Terminating.


Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)

Error: (06/10/2013 10:30:36 PM) (Source: Windows Search Service) (User: )
Description: Unable to initialize the filter host process. Terminating.


Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)


System errors:
=============
Error: (06/10/2013 11:57:21 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
SBRE

Error: (06/10/2013 11:57:17 PM) (Source: Service Control Manager) (User: )
Description: The LoadUserProfile call failed with the following error:
%%299

Error: (06/10/2013 11:55:13 PM) (Source: Service Control Manager) (User: )
Description: The Broadband Test Application service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Run the configured recovery program.

Error: (06/10/2013 11:55:11 PM) (Source: Service Control Manager) (User: )
Description: The UMVPFSrv service terminated unexpectedly. It has done this 1 time(s).

Error: (06/10/2013 11:52:02 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
SBRE

Error: (06/10/2013 11:51:58 PM) (Source: Service Control Manager) (User: )
Description: The LoadUserProfile call failed with the following error:
%%299

Error: (06/10/2013 11:51:53 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 11:49:55 PM on ?6/?10/?2013 was unexpected.

Error: (06/10/2013 11:48:07 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (06/10/2013 11:41:55 PM) (Source: Service Control Manager) (User: )
Description: The Sandboxie Service service terminated unexpectedly. It has done this 1 time(s).

Error: (06/10/2013 11:40:35 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.


Microsoft Office Sessions:
=========================
Error: (06/10/2013 11:58:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 11:57:17 PM) (Source: Microsoft-Windows-User Profiles Service)(User: BooHoo-PC)
Description: Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

Error: (06/10/2013 11:57:17 PM) (Source: Microsoft-Windows-User Profiles Service)(User: BooHoo-PC)
Description:

Error: (06/10/2013 11:52:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/10/2013 11:51:58 PM) (Source: Microsoft-Windows-User Profiles Service)(User: BooHoo-PC)
Description: Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

Error: (06/10/2013 11:51:57 PM) (Source: Microsoft-Windows-User Profiles Service)(User: BooHoo-PC)
Description:

Error: (06/10/2013 11:28:09 PM) (Source: Application Hang)(User: )
Description: DllHost.exe6.1.7600.1638511cc01ce6629851c693260000C:\Windows\system32\DllHost.exed782575b-d21c-11e2-94e0-8c89a5644f4f

Error: (06/10/2013 10:40:43 PM) (Source: Windows Search Service)(User: )
Description:
Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)

Error: (06/10/2013 10:35:36 PM) (Source: Windows Search Service)(User: )
Description:
Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)

Error: (06/10/2013 10:30:36 PM) (Source: Windows Search Service)(User: )
Description:
Details:
This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4)


CodeIntegrity Errors:
===================================
Date: 2013-05-09 00:18:42.783
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 23:54:25.796
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 23:30:52.071
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 21:37:34.087
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 20:51:31.542
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 20:41:12.224
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-08 20:34:13.924
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-07 21:41:00.905
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-07 17:07:35.421
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-05-06 18:01:57.974
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll because the set of per-page image hashes could not be found on the system.
  • 0

#6
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

After that

Please download ComboFix from this location:

Link

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.

  • Double click on ComboFix.exe & follow the prompts.
  • If you have an older Operating System you may be asked whether you want to install the Recovery Console. Click yes and follow any prompts.
  • Your desktop may go blank. This is normal.
  • ComboFix may appear to be doing nothing for quite long periods, this is normal, just leave it to do it's job.
  • ComboFix may reboot your machine. This is normal too.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

When you return please post
  • fixlist.txt
  • ComboFix.txt

Attached Files


  • 0

#7
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
Here are the new logs you requested.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-06-2013
Ran by BooHoo at 2013-06-11 01:26:25 Run:1
Running from C:\Users\BooHoo\Desktop
Boot Mode: Normal

==============================================

HKCR\CLSID\{EBB176D2-AF75-4706-832F-4C8448F72757} => Key deleted successfully.
C:\Users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\i1h185fb.default => Moved successfully.
HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi => Key deleted successfully.
C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll not found.
CHR HomePage: hxxp://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=84998C89A5644F4F ==> The Chrome "Settings" can be used to fix the entry.
CHR RestoreOnStartup: "hxxp://visualbee.delta-search.com/?affID=121376&babsrc=HP_ss&mntrId=84998C89A5644F4F" ==> The Chrome "Settings" can be used to fix the entry.

==== End of Fixlog ====


ComboFix 13-06-08.02 - BooHoo 06/11/2013 1:36.3.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3293.1629 [GMT 1:00]
Running from: c:\users\BooHoo\Desktop\ComboFix.exe
AV: Lavasoft Ad-Aware *Disabled/Updated* {E0D97DD4-42BA-B3F2-A5A7-22E9ACE81FC7}
AV: Webroot Internet Security Complete *Disabled/Updated* {53211D91-0C31-95F2-E3A5-7661FB22889E}
FW: Lavasoft Ad-Aware *Disabled* {D8E2FCF1-08D5-B2AA-8EF8-8BDC523B58BC}
FW: Webroot Internet Security Complete *Disabled* {6B1A9CB4-465E-94AA-C8FA-DF5405F1CFE5}
SP: Lavasoft Ad-Aware *Disabled/Updated* {5BB89C30-6480-BC7C-9F17-199BD76F557A}
SP: Webroot Internet Security Complete *Disabled/Updated* {E840FC75-2A0B-9A7C-D915-4D1380A5C223}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\da0243f6188038df2394764a7c7ead90_c
c:\users\BooHoo\AppData\Local\assembly\tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-05-11 to 2013-06-11 )))))))))))))))))))))))))))))))
.
.
2013-06-11 00:45 . 2013-06-11 00:45 -------- d-----w- c:\users\BooHoo\AppData\Local\temp
2013-06-11 00:45 . 2013-06-11 00:45 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-06-11 00:45 . 2013-06-11 00:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-10 23:35 . 2013-06-10 23:35 -------- d-----w- C:\FRST
2013-06-10 22:52 . 2013-06-10 23:28 -------- d-----w- c:\users\BooHoo\AppData\Local\adawarebp
2013-06-10 22:33 . 2013-06-10 22:33 -------- d-----w- C:\_OTL
2013-06-10 15:25 . 2013-06-10 15:25 -------- d-----w- c:\windows\ERUNT
2013-06-10 15:24 . 2013-06-10 15:24 -------- d-----w- C:\JRT
2013-06-10 15:11 . 2013-06-10 15:11 -------- d-----w- c:\program files\ESET
2013-06-10 05:37 . 2013-06-10 05:37 -------- d-----w- c:\program files\PokerStrategy.com
2013-06-10 05:33 . 2013-06-10 05:33 -------- d-----w- c:\program files\Defraggler
2013-06-09 20:46 . 2013-06-09 20:46 -------- d-----w- c:\programdata\globant english
2013-06-09 20:43 . 2013-06-09 20:43 -------- d-----w- C:\opticon_driver
2013-05-19 20:08 . 2013-05-19 20:08 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 19:12 . 2013-05-18 19:12 262552 ----a-w- c:\program files\Mozilla Firefox\browser\components\browsercomps.dll
2013-05-15 23:44 . 2013-05-15 23:44 -------- d-----w- c:\users\BooHoo\AppData\Roaming\Panel+
2013-05-15 23:43 . 2013-05-15 23:43 -------- d-----w- c:\users\BooHoo\AppData\Local\Panel+
2013-05-15 20:26 . 2013-05-15 20:26 -------- d-----w- c:\users\BooHoo\AppData\Local\Ancestry.com
2013-05-15 04:39 . 2013-04-10 03:14 2347520 ----a-w- c:\windows\system32\win32k.sys
2013-05-15 04:39 . 2013-04-10 05:18 728424 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-05-15 04:39 . 2013-04-10 05:18 218984 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-15 04:39 . 2013-02-27 05:05 101720 ----a-w- c:\windows\system32\consent.exe
2013-05-15 04:39 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\system32\authui.dll
2013-05-15 04:39 . 2013-02-27 04:49 47104 ----a-w- c:\windows\system32\appinfo.dll
2013-05-14 18:04 . 2013-05-14 18:04 16948616 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2013-05-12 05:28 . 2013-05-12 05:28 -------- d-----w- c:\users\Guest\AppData\Local\adawarebp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-06 14:02 . 2012-04-14 19:08 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-06 14:02 . 2012-01-13 00:25 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-15 16:03 . 2012-07-17 13:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-09 17:06 . 2013-05-09 17:06 13560 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-04-12 13:45 . 2013-04-24 06:35 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-11 20:34 . 2012-08-04 03:12 861088 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-04-11 20:34 . 2012-01-20 23:49 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-04-11 10:06 . 2013-05-09 18:21 41584 ----a-w- c:\windows\system32\drivers\gfiark.sys
2013-04-04 13:50 . 2012-08-18 03:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-04-04 04:35 . 2013-05-09 00:30 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-03-27 11:18 . 2013-03-27 18:20 381920 ----a-w- c:\windows\system32\GfKLSPService64.dll
2013-03-27 11:18 . 2013-03-27 18:20 314336 ----a-w- c:\windows\system32\GfKLSPService.dll
2013-03-23 01:09 . 2013-03-23 01:09 354656 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl
2013-03-19 05:04 . 2013-04-21 18:55 3968856 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-21 18:55 3913560 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 04:48 . 2013-04-21 18:55 38912 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 02:49 . 2013-04-21 18:55 69632 ----a-w- c:\windows\system32\smss.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-04-16 15:10 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-04-16 15:10 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-04-16 15:10 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-04-16 15:10 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-04-19 18678376]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2013-02-15 109784]
"OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE" [2012-01-20 719672]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-04-16 19662744]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2012-12-16 545552]
"Panel+"="c:\users\BooHoo\AppData\Local\Panel+\service\PanelPlusService.exe" [2013-02-21 140880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Ad-Aware Antivirus"="c:\program files\Ad-Aware Antivirus\AdAwareLauncher --windows-run" [X]
"EKStatusMonitor"="c:\program files\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2012-10-15 2844608]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-12-18 825560]
"GfK-WatchDog"="c:\program files\GfKLSPService\GfK-WatchDog.exe" [2013-03-27 58848]
"DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2013-03-28 450560]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2013-01-31 542632]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2013-02-15 109784]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"KodakHomeCenter"="c:\program files\Kodak\AiO\Center\AiOHomeCenter.exe" [2012-10-19 2235840]
.
c:\users\BooHoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2013-1-8 228448]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"DisableLocalMachineRun"= 0 (0x0)
"DisableLocalMachineRunOnce"= 0 (0x0)
"DisableCurrentUserRun"= 0 (0x0)
"DisableCurrentUserRunOnce"= 0 (0x0)
"NoFile"= 0 (0x0)
"HideClock"= 0 (0x0)
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service]
@="Ad-Aware Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2012-04-04 05:09 446392 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
.
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R2 M4-Service;M4-Service;c:\users\BooHoo\AppData\Roaming\Mikogo 4\M4-Service.exe [2012-01-16 1007472]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-11-22 3290304]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-07-29 14216]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-07-29 8456]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [2013-04-11 41584]
R3 hitmanpro36;HitmanPro 3.6 Support Driver;c:\windows\system32\drivers\hitmanpro36.sys [2012-09-12 27424]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
R3 MFE_RR;MFE_RR;c:\users\BooHoo\AppData\Local\Temp\mfe_rr.sys [x]
R3 MsgPlusDriver;Messenger Plus! Virtual Camera;c:\windows\system32\DRIVERS\MsgPlusDriver.sys [x]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]
R3 NLNdisMP;NLNdisMP;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 NLNdisPT;NetLimiter Ndis Protocol Service;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 optousb;OPTO ELECTRONICS optousb;c:\windows\system32\DRIVERS\optousb.sys [2010-03-24 22016]
R3 optovcm;OPTO ELECTRONICS optovcm;c:\windows\system32\DRIVERS\optovcm.sys [2010-03-24 28160]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2012-08-20 15576]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2012-08-20 10200]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-20 25600]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-20 112640]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-09 1343400]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-05-09 13560]
S1 pwipf6;Privacyware Filter Driver;c:\windows\system32\DRIVERS\pwipf6.sys [2011-07-21 117104]
S2 Ad-Aware Service;Ad-Aware Service;c:\program files\Ad-Aware Antivirus\AdAwareService.exe [2013-03-18 1236336]
S2 bbtest_svc;Broadband Test Application;c:\program files\Broadband Test Application\BroadbandTestApp.exe [2012-02-29 815104]
S2 GfK-Reporting-Service;GfK-Reporting-Service;c:\program files\GfK Internet-Monitor\GfK-Reporting.exe [2013-03-27 3020768]
S2 GfK-Update-Service;GfK-Update-Service;c:\program files\GfK Internet-Monitor\GfK-Updater.exe [2013-03-27 1376224]
S2 GfKLSPService;GfKLSPService;c:\program files\GfKLSPService\GfKLSPService.exe [2013-03-27 3300320]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\Kodak\AiO\Center\EKAiOHostService.exe [2012-10-19 395200]
S2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [2012-10-15 779200]
S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [2009-12-10 65536]
S2 SBAMSvc;Ad-Aware;c:\program files\Ad-Aware Antivirus\SBAMSvc.exe [2012-09-20 3677000]
S2 sbapifs;sbapifs;c:\windows\system32\DRIVERS\sbapifs.sys [2012-09-12 66344]
S2 ssfmonm;ssfmonm;c:\windows\system32\DRIVERS\ssfmonm.sys [2011-05-18 45584]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-04-23 3574624]
S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
S3 KMWDFILTERx86;HIDServiceDesc;c:\windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010-10-01 1149552]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-05 22:54 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-14 14:02]
.
2013-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-09-25 18:27]
.
2013-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-09-25 18:27]
.
2013-06-10 c:\windows\Tasks\IsposureAgent.job
- c:\program files\Broadband Test Application\BroadbandTestApp.exe [2011-03-24 16:30]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = http=localhost:44413
IE: Customize Menu - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office15\EXCEL.EXE/3000
IE: Fill Forms - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: Save Forms - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Se&nd to OneNote - c:\progra~1\MICROS~4\Office15\ONBttnIE.dll/105
IE: Show RoboForm Toolbar - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
LSP: c:\windows\system32\GfKLSPService.DLL
TCP: DhcpNameServer = 192.168.0.1
DPF: {EBB176D2-AF75-4706-832F-4C8448F72757} - hxxp://www.shopandscan.com/TNSClickrc.CAB
FF - ProfilePath - c:\users\BooHoo\AppData\Roaming\Mozilla\Firefox\Profiles\y2tjhgft.Default User\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?ourmark=3&ei=utf-8&fr=nectar-tb-v2&slv8-&type=61465&p=
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-05-16 00:43; IpsosPanelPlus@ipsosinteractive.com; c:\users\BooHoo\AppData\Local\Panel+\toolbar_ff
.
.
------- File Associations -------
.
JSEFile="%SystemRoot%\System32\WScript.exe" "%1" %*
.
- - - - ORPHANS REMOVED - - - -
.
ShellIconOverlayIdentifiers-{6B78A880-15CA-468f-8422-A7960AD6FBB9} - (no file)
ShellIconOverlayIdentifiers-{4EE7A346-5845-471e-9FAB-002EAF83F8B0} - (no file)
ShellIconOverlayIdentifiers-{53DABC15-4F29-44ad-B09A-E0D0F9A3D075} - (no file)
ShellIconOverlayIdentifiers-{493FC96E-B938-4924-9B38-C4088E9B8AC2} - (no file)
SafeBoot-WRConsumerService
AddRemove-Coupon Printer for Windows5.0.0.1 - c:\program files\Coupons\uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{724D43A0-0D85-11D4-9908-00400523E39A}"=hex:51,66,7a,6c,4c,1d,38,12,ce,40,5e,
76,b7,43,ba,54,e6,1e,43,00,00,7d,a7,8e
"{517BDDE4-E3A7-4570-B21E-2B52B6139FC7}"=hex:51,66,7a,6c,4c,1d,38,12,8a,de,68,
55,95,ad,1e,00,cd,08,68,12,b3,4d,db,d3
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}"=hex:51,66,7a,6c,4c,1d,38,12,57,36,90,
43,f7,9e,4b,04,e0,be,4b,59,e7,b4,e8,87
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=hex:51,66,7a,6c,4c,1d,38,12,35,c0,f5,
ea,2a,2f,b2,54,e3,64,43,53,25,99,dc,53
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,38,12,e3,75,7d,
36,b0,0f,93,03,e3,00,57,09,a1,c9,d1,e0
"{4BEEA052-726D-4A6E-B65D-A6BD07C263F3}"=hex:51,66,7a,6c,4c,1d,38,12,3c,a3,fd,
4f,5f,3c,00,0f,c9,4b,e5,fd,02,9c,27,e7
"{724D43A9-0D85-11D4-9908-00400523E39A}"=hex:51,66,7a,6c,4c,1d,38,12,c7,40,5e,
76,b7,43,ba,54,e6,1e,43,00,00,7d,a7,8e
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AE7CD045-E861-484F-8273-0445EE161910}"=hex:51,66,7a,6c,4c,1d,38,12,2b,d3,6f,
aa,53,a6,21,0d,fd,65,47,05,eb,48,5d,04
"{CC59E0F9-7E43-44FA-9FAA-8377850BF205}"=hex:51,66,7a,6c,4c,1d,38,12,97,e3,4a,
c8,71,30,94,01,e0,bc,c0,37,80,55,b6,11
"{D93EC24D-8741-4D41-B83D-A5793B998416}"=hex:51,66,7a,6c,4c,1d,38,12,23,c1,2d,
dd,73,c9,2f,08,c7,2b,e6,39,3e,c7,c0,02
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{EEE6C35C-6118-11DC-9C72-001320C79847}"=hex:51,66,7a,6c,4c,1d,38,12,32,c0,f5,
ea,2a,2f,b2,54,e3,64,43,53,25,99,dc,53
"{F4971EE7-DAA0-4053-9964-665D8EE6A077}"=hex:51,66,7a,6c,4c,1d,38,12,89,1d,84,
f0,92,94,3d,05,e6,72,25,1d,8b,b8,e4,63
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{4A62FAC4-1670-430B-8C6B-9C7B53F51798}"=hex:51,66,7a,6c,4c,1d,38,12,aa,f9,71,
4e,42,58,65,06,f3,7d,df,3b,56,ab,53,8c
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:f7,91,03,0a,53,8d,cd,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,28,2a,78,25,eb,91,67,48,ba,26,70,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,28,2a,78,25,eb,91,67,48,ba,26,70,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-06-11 01:46:40
ComboFix-quarantined-files.txt 2013-06-11 00:46
.
Pre-Run: 211,322,318,848 bytes free
Post-Run: 211,308,871,680 bytes free
.
- - End Of File - - 40EEB52CD993C6AC950F3D437D6B8CAD
DEFD5998A334A58190B6A3E95454049A
  • 0

#8
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
Go to the link below for instructions on how to change Google Chome's homepage.

http://support.googl...en&answer=95314

Then

In Google Chrome:

  • Click the wrench icon on the browser toolbar.
  • Click Tools.
  • Select Extensions.
  • Click the trash can icon by visualbee or similar or related.
  • A confirmation dialog will appear, click Remove.
After that

Run the ESET scan again. Post back the results and tell me how the machine is now.
  • 0

#9
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
She's changed the homepage and has searched through the extensions but there was no visualbee (as you can see in the attached pic). She's running ESET again now.


Google Extensions - No VisualBee.png
  • 0

#10
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
That's fine.

Look forward to the results.
  • 0

#11
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
ESET is three hours into the scan (no infected files thus far); She doesn't want to try to run anything else until that finishes, so will post the log and an update tomorrow.

Thanks for your help so far.
  • 0

#12
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts

She doesn't want to try to run anything else until that finishes


Very sensible.

Catch you tomorrow. :)
  • 0

#13
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
As mentioned in my first post, Firefox was constantly freezing and having to be restarted with as little as one tab open; I just opened 15 tabs without it freezing, but pages are loading very slowly.

One of the issues my girlfriend has been experiencing recently is constant freezing when she runs PokerStars (something which has never previously been an
issue) - to the point where she has been unable to play. If you are agreeable, I think it would be a good idea if she uses her computer as she usually would
tomorrow (including running Stars, PokerTracker and other programs she usually has running at the same time) to see whether the problem is resolved, so that I
can report back to you.

Results of the scan below.

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f44996ba692cd24d9edb61b7621ce40b
# engine=14043
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-11 01:29:10
# local_time=2013-06-11 02:29:10 (+0000, GMT Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 20131206 123380541 0 0
# scanned=17535
# found=0
# cleaned=0
# scan_time=987
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f44996ba692cd24d9edb61b7621ce40b
# engine=14043
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-11 04:44:51
# local_time=2013-06-11 05:44:51 (+0000, GMT Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 20142947 123392282 0 0
# scanned=230688
# found=0
# cleaned=0
# scan_time=11645
  • 0

#14
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 17,472 posts
Up to you but a full removal of Firefox including profiles which don't normally get removed in an uninstall can sometimes help.

Here are the instructions:

This time we are going to try another approach with uninstalling an re-installing Firefox. We need to remove your Firefox profile data and settings. Before we do this we want to backup your bookmarks.

To back up your bookmarks:

In Firefox go to History > Show all History > Import and Backup (toolbar along the top) > Export HTML... and save it to your desktop.

Later when you re-install FF you can reverse the process and Import HTML... when the Wizard comes up just import the HTML file you had saved earlier.

Now

Go to the link below for instructions on how to remove Firefox:

http://kb.mozillazin...install_firefox

Look under the heading On Windows

Follow the instructions there On Windows7/Vista and in particular follow this instruction - see the bolded part:

Starting in Firefox 3, the uninstaller includes the option, "Remove my Firefox personal data and customizations". This will also remove your Firefox user profile data (bookmarks, passwords, cookies, extensions, preferences, etc.).

If the uninstall fails, as it may in some cases, continue on with the rest of the uninstall instructions.

Once you have remove Firefox entirely then download a new copy and re-install. After that, follow the instruction above to import your bookmarks back.

Firefox may be downloaded from here.
  • 0

#15
UpTheCreek

UpTheCreek

    Member

  • Member
  • PipPip
  • 20 posts
She's been playing poker for 6.5 hours on several tables with multiple firefox tabs open, pokertracker running, Skype call going and has had minimal freezing(twice in the 6.5 hours). She's uninstalled firefox with the profile removal and is planning to reinstall it later. We both appreciate all of your help and are very grateful.
  • 0


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured