Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

ADNXS.....pop-up [Closed]

Started by joe1167 , Jan 04 2015 05:36 AM

This topic is locked

#1
joe1167

Posted 04 January 2015 - 05:36 AM

Member

Member
26 posts

Hello,

Happy New year to you all!! Hoping you can help me. When I start up my PC (running windows 8.1 64-bit) I get an ADNXS..... pop up. Can you help in removing this? I scanned with Rogue Killer and the results are below. Please let me know if there is anything else you need.

Thanks!

joe1167

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 12 ¤¤¤
[Hidden.From.SCM] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\klkbdflt2 (\SystemRoot\system32\DRIVERS\klkbdflt2.sys) -> Found
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2420055085-2475560592-1041023855-1002\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.aol.com -> Found
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2420055085-2475560592-1041023855-1002\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.aol.com -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.1 68.237.161.12 [UNITED STATES (US)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.1 68.237.161.12 [UNITED STATES (US)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87110EA2-208D-423B-A36D-B5C33795C539} | DhcpNameServer : 192.168.1.1 68.237.161.12 [UNITED STATES (US)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{87110EA2-208D-423B-A36D-B5C33795C539} | DhcpNameServer : 192.168.1.1 68.237.161.12 [UNITED STATES (US)] -> Found
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
[Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:/PROGRA~3/{BFD95~1/rete.dll -> Found

¤¤¤ Tasks : 1 ¤¤¤
[Suspicious.Path] UpdaterEX.job -- C:\Users\Altieri\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE (/Check) -> Found

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: WDC WD7500BPVX-60JC3 SATA Disk Device +++++
--- User ---
[MBR] fd9c45f893067b4140b808bdc8664c76
[BSP] f5d2fdebf049248a4e68d20ee572f3c3 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097151 MB
User = LL1 ... OK
User = LL2 ... OK

#2
ruggie_uk

Posted 04 January 2015 - 04:29 PM

Trusted Helper

Malware Removal
2,083 posts

Greetings joe1167 and :welcome:

My nickname is Ruggie and I will be assisting you in cleaning your computer.
Please be aware I am currently in the final stages of training right now and all my work will be checked by an instructor so there may be a slight delay between posts. The added benefit to this is that you will have 2 sets of eyes looking at your problem so you can be assured you will get the best possible help.

Malware removal can be a long process and will at times get complicated with multiple steps to perform to ensure that your system is no longer infected.
When we start the process, the list of instructions must be followed closely, it may seem difficult at times but it is important that you stay with me until your computer is declared clean.
If you are receiving help elsewhere, please let me know so we can close this thread and help someone else.

Before going any further, I recommend that you print out (or save to a file) these guidelines and also the instructions when I post them, as part of the repair process may involve going into safe mode and therefore you will not have internet access.

The following guidelines are important but the ones highlighted in RED are of the highest importance and must not be skipped.

Please be aware, the fixes we perform are specific to this machine, at this moment in time. They must not be used on another computer or unsupervised at another time. This can render your computer unbootable.

If at all possible, Make backups of all your important files, whilst we will do our best to ensure that no files are lost or damaged, sometimes things can go wrong.

I will do everything in my power to ensure that this clean is successful, but occasionally failure hits us all. In this event, please have your original installation disks to hand and be prepared to have to format and reinstall your computer.

Refrain from using any tool that hasn't been instructed as it could alter the process that we are working through and cause further problems. Also only use the tools I instruct in the manner provided as they are very powerful and if not used properly can cause even more problems. It is best if you can avoid using the computer at all, apart from to perform the cleaning steps to ensure that any infections aren't spread.

Please stick with me until the end. malware removal is difficult and time consuming. We have to analyse hundreds of lines in log files. This takes time which we give freely so I ask that you do us the courtesy of seeing it through.

Only paste the contents of log files into your reply, DO NOT attach any log files unless requested to do so.

If you have any questions or get stuck, stop and ask....I am here to help you make this go as smoothly as possible.

If you do not reply within 3 days, your topic will be closed. It can be reopened if you ask. But if you plan on being gone for a longer period, just let me know and I will hold it open for you.

Ready? Now lets get to work

I've looked through your Roguekiller log and there are a couple of items of note. But let's look with FRST and get a fuller picture of your computer.

Initial FRST Scan

Please download Farbar Recovery Scan Tool and save it to your Desktop. There will be 2 versions offered, if you know which version is the one you need, download that one, if not, download both, only one will work on your computer, that is the one you need.

Right click to run as administrator. >> Windows 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
When the tool opens click Yes to the disclaimer.
Ensure that the following are ticked as in the image below

Drivers MD5
Shortcut.txt
Addition.txt

Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
This will also generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

Items I need to see in your next post:

FRST.txt
Shortcut.txt
Addition.txt

#3
joe1167

Posted 07 January 2015 - 10:03 AM

Member

Topic Starter
Member
26 posts

Hi Ruggie,

Thank you so much for helping me. I'm REALLY new at this. Can you please tell me how to obtain the

FRST.txt
Shortcut.txt
Addition.txt

So sorry for being so new. I will try my best to do everything you recommend correctly.

#4
ruggie_uk

Posted 07 January 2015 - 10:22 AM

Trusted Helper

Malware Removal
2,083 posts

No problem.

When you have downloaded FRST as mentioned above,

Start it and select the options for the logs we need.

Then click Scan.

The text files will automatically be opened once it has finished.

If you close them by accident, they will also be saved in the same place where FRST was run from (which should be the desktop)

#5
ruggie_uk

Posted 09 January 2015 - 12:55 PM

Trusted Helper

Malware Removal
2,083 posts

Hi, how are you getting on?

Do you need help with anything?

#6
joe1167

Posted 10 January 2015 - 01:05 PM

Member

Topic Starter
Member
26 posts

I installed the FRST and ran the scan with the boxes ticked as instructed. What do you need in the 3 results, the whole result of each? If so, do I cut and paste them consecutively and send to you in my reply?

joe1167

#7
ruggie_uk

Posted 10 January 2015 - 01:06 PM

Trusted Helper

Malware Removal
2,083 posts

Yes please. The whole results.

Might be better making one post for each file.

#8
joe1167

Posted 11 January 2015 - 05:26 AM

Member

Topic Starter
Member
26 posts

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Mindspark) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39barsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AOL Inc.) C:\Program Files (x86)\Common Files\AOL\1416183200\ee\aolsoftware.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AOL Inc.) C:\Program Files (x86)\Common Files\AOL\acs\AOLacsd.exe
(Mindspark) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\APPINTEGRATOR.EXE
(Mindspark) C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\AppIntegrator64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicator.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HP Photosmart 7520 series.exe
(Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
(AOL Inc.) C:\Program Files (x86)\AOL Desktop 9.6\waol.exe
(AOL Inc.) C:\Program Files (x86)\AOL Desktop 9.6\shellmon.exe
(AOL Inc.) C:\Program Files (x86)\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe
(AOL Inc.) C:\Program Files (x86)\AOL Desktop 9.6\AOLBrowser\aolbrowser.exe
(Farbar) C:\Users\Altieri\AppData\Local\Microsoft\Windows\INetCache\IE\RMUKX187\FRST64[1].exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573208 2014-04-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2818800 2014-04-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [HostManager] => C:\Program Files (x86)\Common Files\AOL\1416183200\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [MapsGalaxy EPM Support] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39medint.exe [12872 2015-01-06] (Mindspark)
HKLM-x32\...\Run: [MapsGalaxy AppIntegrator 32-bit] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\AppIntegrator.exe [225864 2015-01-06] (Mindspark)
HKLM-x32\...\Run: [MapsGalaxy AppIntegrator 64-bit] => C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\AppIntegrator64.exe [258632 2015-01-06] (Mindspark)
HKLM-x32\...\Run: [MapsGalaxy Search Scope Monitor] => "C:\PROGRA~2\MAPSGA~1\bar\1.bin\39srchmn.exe" /m=2 /w /h
HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\Run: [AOL Fast Start] => C:\Program Files (x86)\AOL Desktop 9.6\AOL.EXE [42320 2011-04-25] (AOL Inc.)
HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\MountPoints2: {b70ca3b0-856d-11e4-8270-3010b3635334} - "E:\mri.exe"
AppInit_DLLs-x32: C:/PROGRA~3/{BFD95~1/rete.dll => C:/PROGRA~3/{BFD95~1/rete.dll [634880 2014-12-20] ()
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT14/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT14/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.c...TIONS-MAPS-main
URLSearchHook: HKU\S-1-5-21-2420055085-2475560592-1041023855-1002 - (No Name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/...&cr=92104933=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/...&cr=92104933=
SearchScopes: HKLM -> {7EFFC6A6-ACF9-404C-B041-4C6B51F5B08A} URL = http://www.amazon.co...ds={searchTerms}
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = http://Vosteran.com/...r=1299269827=
SearchScopes: HKLM-x32 -> {7EFFC6A6-ACF9-404C-B041-4C6B51F5B08A} URL = http://www.amazon.co...ds={searchTerms}
SearchScopes: HKLM-x32 -> {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = http://search.tb.ask...or={searchTerms}
SearchScopes: HKU\S-1-5-21-2420055085-2475560592-1041023855-1002 -> {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = http://search.tb.ask...or={searchTerms}
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Toolbar BHO -> {1e91a655-bb4b-4693-a05e-2edebc4c9d89} -> C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Search Assistant BHO -> {71c1d63a-c944-428a-a5bd-ba513190e5d2} -> C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
Toolbar: HKU\S-1-5-21-2420055085-2475560592-1041023855-1002 -> MapsGalaxy - {364EA597-E728-4CE4-BB4A-ED846EF47970} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 68.237.161.12

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @viewpoint.com/VMP -> C:\Program Files (x86)\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DragonRIAPlugin -> C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\npDgnRia.dll (Nuance Communications Inc.)
FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi
FF Extension: Dragon NaturallySpeaking Rich Internet Application Support - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2012-07-18]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected]
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-19]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected]
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-19]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected]
FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-19]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [140288 2014-06-01] () [File not signed]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-01] (Advanced Micro Devices, Inc.) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows ® Win 7 DDK provider)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-27] (WildTangent)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89352 2014-09-15] (Hewlett-Packard Company)
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [469304 2014-03-04] (Hewlett-Packard Development Company, L.P.)
R2 MapsGalaxy_39Service; C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39barsvc.exe [90696 2015-01-06] (Mindspark)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [191728 2014-04-21] (Synaptics Incorporated)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17640 2013-10-24] (Advanced Micro Devices, INC.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [150536 2014-12-19] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [247480 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [799944 2014-12-19] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [68616 2014-12-19] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [77512 2014-12-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-03] (Realtek Semiconductor Corp.)
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [30448 2014-04-21] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [31472 2014-04-21] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-01-04] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
U3 McAPExe; No ImagePath
U3 McMPFSvc; No ImagePath
U3 McNaiAnn; No ImagePath
U3 mfecore; No ImagePath
U3 MSK80Service; No ImagePath

========================== Drivers MD5 =======================

C:\Windows\System32\drivers\1394ohci.sys E1832BD9FD7E0FC2DC9FA5935DE3E8C1
C:\Windows\System32\drivers\3ware.sys AD508A1A46EC21B740AB31C28EFDFDB1
C:\Windows\system32\DRIVERS\Accelerometer.sys F39180029723D7779C80360F9E255709
C:\Windows\System32\drivers\ACPI.sys 9539F7917B4B6D92C90F0FAA6B86C605
C:\Windows\System32\Drivers\acpiex.sys AC8279D229398BCF05C3154ADCA86813
C:\Windows\System32\drivers\acpipagr.sys A8970D9BF23CD309E0403978A1B58F3F
C:\Windows\System32\drivers\acpipmi.sys 111A89C99C5B4F1A7BCE5F643DD86F65
C:\Windows\System32\drivers\acpitime.sys 5758387D68A20AE7D3245011B07E36E7
C:\Windows\System32\drivers\ADP80XX.SYS 7C1FDF1B48298CBA7CE4BDD4978951AD
C:\Windows\system32\drivers\afd.sys 374E27295F0A9DCAA8FC96370F9BEEA5
C:\Windows\System32\drivers\agp440.sys 7DFAEBA9AD62D20102B576D5CAC45EC8
C:\Windows\System32\DRIVERS\ahcache.sys 8E8E34B7BA059050EED827410D0697A2
C:\Windows\System32\drivers\AmdAS4.sys C3E8F88B4D196110673DA03E2E95D83B
C:\Windows\System32\drivers\amdk8.sys 7589DE749DB6F71A68489DCE04158729
C:\Windows\system32\DRIVERS\atikmdag.sys D130263D404B1160C4F0B2BD31EA610B
C:\Windows\system32\DRIVERS\atikmpag.sys 572B1E7478422A92FDC54C4601B80BEE
C:\Windows\System32\drivers\amdppm.sys B46D2D89AFF8A9490FA8C98C7A5616E3
C:\Windows\System32\drivers\amdsata.sys D2BF2F94A47D332814910FD47C6BBCD2
C:\Windows\System32\drivers\amdsbs.sys A8E04943C7BBA7219AA50400272C3C6E
C:\Windows\System32\drivers\amdxata.sys CEA5F4F27CFC08E3A44D576811B35F50
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys 10378ADFA7F832B68616C3B8C6470DBB
C:\Windows\system32\drivers\appid.sys 04951A9A937CBE28A2D3FEEA360B6D1F
C:\Windows\System32\drivers\arcsas.sys 65045784366F7EC5FB4E71BCF923187B
C:\Windows\System32\drivers\atapi.sys 74B14192CF79A72F7536B27CB8814FBD
C:\Windows\system32\DRIVERS\athwbx.sys 506CDD8280C18029753B8AB0E9F42432
C:\Windows\system32\drivers\AtihdWB6.sys 517334A411CD079EE9AEF4C2167875A5
C:\Windows\System32\drivers\bxvbda.sys A4A73F631FE2AA2826FBE4A399B04DEF
C:\Windows\System32\drivers\BasicDisplay.sys 8CC7F7E4AFCBA605921B137ED7992C68
C:\Windows\System32\drivers\BasicRender.sys 38A82F4EE8C416A6744B6D30381ED768
C:\Windows\System32\drivers\bcmfn2.sys C1ABB0F7E3BEA48A0417BDF6FF14AB21
C:\Windows\System32\Drivers\Beep.sys EC19013E4CF87609534165DF897274D6
C:\Windows\System32\DRIVERS\bowser.sys 6B4FFFDDC618FCF64473CAA86E305697
C:\Windows\system32\DRIVERS\btfilter.sys 8434237E1EC39E85D8ACE6FA694A5733
C:\Windows\System32\drivers\BthAvrcpTg.sys A8F23D453A424FF4DE04989C4727ECC7
C:\Windows\System32\drivers\BthEnum.sys 131F1C8573E7BFB41C54FBF5309CCD94
C:\Windows\System32\drivers\bthhfenum.sys 746B9F94214915AECDE4B7FEA5FF9664
C:\Windows\System32\drivers\BthHFHid.sys 71FE2A48E4C93DDB9798C024880B6C07
C:\Windows\system32\DRIVERS\BthLEEnum.sys D30C67473A2E229662D21F27EAA9AAA5
C:\Windows\System32\drivers\bthmodem.sys 66B791F6B11DC4303DD18A224A501542
C:\Windows\System32\drivers\bthpan.sys 25BB93167DEF270188072603F92A1EF5
C:\Windows\System32\Drivers\BTHport.sys 97B9076611291AE4C4C107BC915BD026
C:\Windows\System32\Drivers\BTHUSB.sys 23E75BED9076F856B36F5F934BBD5795
C:\Windows\System32\DRIVERS\cdfs.sys 2FA6510E33F7DEFEC03658B74101A9B9
C:\Windows\System32\drivers\cdrom.sys C6796EA22B513E3457514D92DCDB1A3D
C:\Windows\System32\drivers\circlass.sys BE9936EDD3267FAAFF94A7835867F00B
C:\Windows\System32\drivers\CLFS.sys 179A41249055D5F039F1B6703F3B6D2B
C:\Windows\system32\DRIVERS\CLVirtualDrive.sys 5C646CAC91E086F7FF53C7F2E857F263
C:\Windows\system32\DRIVERS\clwvd.sys 9731DAFDC7B690B2C7752FDFF045BFD8
C:\Windows\System32\drivers\CmBatt.sys EF6EF85DADC3184A10D8F2F7159973CB
C:\Windows\System32\DRIVERS\cm_km_w.sys AFA1BFF926592FD0C3AB97D838652EF9
C:\Windows\System32\Drivers\cng.sys 4E1207CE16E615B0B7A70DC889F4500E
C:\Windows\System32\drivers\CompositeBus.sys 03AAED827C36F35D70900558B8274905
C:\Windows\System32\drivers\condrv.sys A1FF7DFBFBE164CF92603C651D304DD2
C:\Windows\System32\drivers\dam.sys 315BA4BC19316D72B2E037534E048B93
C:\Windows\System32\drivers\dc3d.sys D06E443457FADC6B1AFAF3AA4B6936F6
C:\Windows\System32\Drivers\dfsc.sys A03F362C5557E238CBFA914689C77248
C:\Windows\System32\drivers\disk.sys 4D40C9B33F738797CF50E77CB7C53E85
C:\Windows\System32\drivers\dmvsc.sys EB70A894708D1BC176AFD690FF06085F
C:\Windows\system32\drivers\drmkaud.sys DDC11A202207C0400CBE07315B8FDE5E
C:\Windows\System32\drivers\dxgkrnl.sys 313DCE665B57000B18CB26C6B6A10DFE
C:\Windows\System32\drivers\evbda.sys 114BCFDF367FF37C3F1B0A96AF542E4D
C:\Windows\System32\drivers\EhStorClass.sys 43531A5993380CC5113242C29D265FD9
C:\Windows\System32\drivers\EhStorTcgDrv.sys 6F8E738A9505A388B1157FDDE7B3101B
C:\Windows\System32\drivers\errdev.sys DFFFAE1442BA4076E18EED5E406FA0D3
C:\Windows\System32\Drivers\exfat.sys 7729D294A555C7AEB281ED8E4D0E01E4
C:\Windows\System32\Drivers\fastfat.sys 7C4E0D5900B2A1D11EDD626D6DDB937B
C:\Windows\System32\drivers\fdc.sys 5D8402613E778B3BD45E687A8372710B
C:\Windows\System32\drivers\fileinfo.sys BCFD8B149B3ADF92D0DB1E909CAF0265
C:\Windows\System32\drivers\filetrace.sys A1A66C4FDAFD6B0289523232AFB7D8AF
C:\Windows\System32\drivers\flpydisk.sys BE743083CF7063C486A4398E3AEFE59A
C:\Windows\System32\drivers\fltmgr.sys 6592D192E2823C043EDBC010E7774053
C:\Windows\System32\drivers\FsDepends.sys 35005534E600E993A90B036E4E599F2B
C:\Windows\System32\Drivers\Fs_Rec.sys 09F460AFEDCA03F3BF6E07D1CCC9AC42
C:\Windows\System32\DRIVERS\fvevol.sys F152D55E497E12256290C43B31C7D0CE
C:\Windows\System32\drivers\fxppm.sys 9591D0B9351ED489EAFD9D1CE52A8015
C:\Windows\System32\drivers\gagp30kx.sys FC3EF65EE20D39F8749C2218DBA681CA
C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F
C:\Windows\System32\drivers\vmgencounter.sys 0BF5CAD281E25F1418E5B8875DC5ADD1
C:\Windows\System32\Drivers\msgpioclx.sys 8DF1254093B5C354CE725EB6B9B0DE19
C:\Windows\system32\drivers\HdAudio.sys 56F69F7C25FB67C970997D7066DBC593
C:\Windows\System32\drivers\HDAudBus.sys D4B7ED39C7900384D9E5C1283F1E7926
C:\Windows\System32\drivers\HidBatt.sys 10A70BC1871CD955D85CD88372724906
C:\Windows\System32\drivers\hidbth.sys 1EA1B4FABB8CC348E73CA90DBA22E104
C:\Windows\System32\drivers\hidi2c.sys C241A8BAFBBFC90176EA0F5240EACC17
C:\Windows\System32\drivers\hidir.sys 9BDDEE26255421017E161CCB9D5EDA95
C:\Windows\System32\drivers\hidusb.sys 8DB8EAB9D0C6A5DF0BDCADEA239220B4
C:\Windows\System32\DRIVERS\hpdskflt.sys 8B8E6BD988EAF18C1B86704BF05E5C03
C:\Windows\System32\drivers\HpSAMD.sys A6AACEA4C785789BDA5912AD1FEDA80D
C:\Windows\System32\drivers\HTTP.sys 9DDCA7F18983C5410DEFF79F819DF93C
C:\Windows\System32\drivers\hwpolicy.sys 90656C0B3864804B090434EFC582404F
C:\Windows\System32\drivers\hyperkbd.sys 6D6F9E3BF0484967E52F7E846BFF1CA1
C:\Windows\system32\DRIVERS\HyperVideo.sys 907C870F8C31F8DDD6F090857B46AB25
C:\Windows\System32\drivers\i8042prt.sys 84CFC5EFA97D0C965EDE1D56F116A541
C:\Windows\System32\drivers\iaLPSSi_GPIO.sys 5D90E32E36CE5D4C535D17CE08AEAF05
C:\Windows\System32\drivers\iaLPSSi_I2C.sys DD05E7E80F52ADE9AEB292819920F32C
C:\Windows\System32\drivers\iaStorAV.sys 08BFE413B0B4AA8DFA4B5684CE06D3DC
C:\Windows\System32\drivers\iaStorV.sys A2200C3033FA4EF249FC096A7A7D02A2
C:\Windows\system32\drivers\RTKVHD64.sys 44ED7064A8CFF33E6D2BCC81412145F7
C:\Windows\System32\drivers\intelide.sys 4E448FCFFD00E8D657CD9E48D3E47157
C:\Windows\System32\drivers\intelpep.sys A770340FC02B999EF0DE6C2A6BC8437C
C:\Windows\System32\drivers\intelppm.sys 47E74A8E53C7C24DCE38311E1451C1D9
C:\Windows\System32\DRIVERS\ipfltdrv.sys 9DB76D7F9E4E53EFE5DD8C53DE837514
C:\Windows\System32\drivers\IPMIDrv.sys 9C096BF5E10CA8BFA56F32522A89FAF1
C:\Windows\System32\drivers\ipnat.sys B7342B3C58E91107F6E946A93D9D4EFD
C:\Windows\System32\drivers\irenum.sys AE44C526AB5F8A487D941CEB57B10C97
C:\Windows\System32\drivers\isapnp.sys 8AFEEA3955AA43616A60F133B1D25F21
C:\Windows\System32\drivers\msiscsi.sys D90AB68D0FAC9F357F663670FDBB511E
C:\Windows\System32\drivers\kbdclass.sys 8BE92376799B6B44D543E8D07CDCF885
C:\Windows\System32\drivers\kbdhid.sys FB6E47E569D4872ABEB506BE03A45FBA
C:\Windows\system32\DRIVERS\kdnic.sys 813871C7D402A05F2E3A7075F9584A05
C:\Windows\System32\DRIVERS\kl1.sys D93E72DCC2A99E67931BB79485563146
C:\Windows\system32\DRIVERS\kldisk.sys 37D7CBA1797D1FA2490089DA0CFF6ADA
C:\Windows\System32\DRIVERS\klelam.sys F2EB9202FCCC81E0902D3C5A70037A44
C:\Windows\system32\DRIVERS\klflt.sys 17BCA7231808182F89154B53CA006F20
C:\Windows\system32\DRIVERS\klhk.sys D65DBBAD177325E3EE2B7BC8FE5EB1D0
C:\Windows\System32\DRIVERS\klif.sys 34758077EBF3C97DC4A939C4614065CA
C:\Windows\system32\DRIVERS\klim6.sys 753BFA638ACE05983D4C64988CC13926
C:\Windows\system32\DRIVERS\klkbdflt.sys 37ADA02E498051A4D533F21096789597
C:\Windows\system32\DRIVERS\klmouflt.sys 8849D8F6259D3494E8C5C9482EE40A08
C:\Windows\system32\DRIVERS\klpd.sys 8C0EC95AD65A0DE3D6C040591D02BF02
C:\Windows\system32\DRIVERS\klwfp.sys 04E01889D895C1321EE28BE80F7C1B0F
C:\Windows\system32\DRIVERS\klwtp.sys 926BA68DA79545EB6D99BB009B781E5E
C:\Windows\system32\DRIVERS\kneps.sys D4CEEAC11C65F49D0F42E74440E829BF
C:\Windows\System32\Drivers\ksecdd.sys ADDECBCC777665BD113BED437E602AB0
C:\Windows\System32\Drivers\ksecpkg.sys 6D2EE96150E35B9EA49F2B481DE0369A
C:\Windows\system32\drivers\ksthunk.sys 11AFB527AA370B1DAFD5C36F35F6D45F
C:\Windows\system32\DRIVERS\lltdio.sys C09010B3680860131631F53E8FE7BAD8
C:\Windows\System32\drivers\lsi_sas.sys C755AE4635457AA2A11F79C0DF857ABC
C:\Windows\System32\drivers\lsi_sas2.sys ADAC09CBE7A2040B7F68B5E5C9A75141
C:\Windows\System32\drivers\lsi_sas3.sys 04D1274BB9BBCCF12BD12374002AA191
C:\Windows\System32\drivers\lsi_sss.sys 327469EEF3833D0C584B7E88A76AEC0C
C:\Windows\system32\drivers\luafv.sys DDEE191AB32DFC22C6465002ECDF5EE4
C:\Windows\System32\drivers\megasas.sys EB5C03A070F30D64A6DF80E53B22F53F
C:\Windows\System32\drivers\megasr.sys F6F13533196DE7A582D422B0241E4363
C:\Windows\System32\drivers\modem.sys 8B38C44F69259987C95135C9627E2378
C:\Windows\System32\drivers\monitor.sys 601589000CC90F0DF8DA2CC254A3CCC9
C:\Windows\System32\drivers\mouclass.sys CEAC6D40FE887CE8406C2393CF97DE06
C:\Windows\System32\drivers\mouhid.sys 02D98BF804084E9A0D69D1C69B02CCA9
C:\Windows\System32\drivers\mountmgr.sys 515549560D481138E6E21AF7C6998E56
C:\Windows\System32\drivers\mpsdrv.sys F170510BE94CF45E3C6274578F6204B2
C:\Windows\system32\drivers\mrxdav.sys 1D55DADC22D21883A2F80297F5A5AE48
C:\Windows\System32\DRIVERS\mrxsmb.sys 7A1A3F213CDB3363D179D5014272025D
C:\Windows\System32\DRIVERS\mrxsmb10.sys 3E28B99198B514DFEB152EACF913025E
C:\Windows\System32\DRIVERS\mrxsmb20.sys C910E5D18958914A66F0E45689D0B40A
C:\Windows\system32\DRIVERS\bridge.sys E0927EFA25D473367C3341B9F5969779
C:\Windows\System32\Drivers\Msfs.sys D13329FBF8345B28AB30F44CC247DC08
C:\Windows\System32\drivers\msgpiowin32.sys C6B474E46F9E543B875981ED3FFE6ADD
C:\Windows\System32\drivers\mshidkmdf.sys 65C92EB9D08DB5C69F28C7FFD4E84E31
C:\Windows\System32\drivers\mshidumdf.sys 52299F086AC2DAFD100DD5DC4A8614BA
C:\Windows\System32\drivers\msisadrv.sys 36D92AF3343C3A3E57FEF11C449AEA4C
C:\Windows\system32\drivers\MSKSSRV.sys A9BBBD2BAE6142253B9195E949AC2E8D
C:\Windows\system32\DRIVERS\mslldp.sys 375E44168F2DFB91A68B8A3F619C5A7C
C:\Windows\system32\drivers\MSPCLOCK.sys 7B2128EB875DCBC006E6A913211006D6
C:\Windows\system32\drivers\MSPQM.sys 1E88171579B218115C7A772F8DE04BD8
C:\Windows\System32\Drivers\MsRPC.sys BBE2A455053E63BECBF42C2F9B21FAE0
C:\Windows\System32\drivers\mssmbios.sys 8D6B7D515C5CBCDB75B928A0B73C3C5E
C:\Windows\system32\drivers\MSTEE.sys 115019AE01E0EB9C048530D2928AB4A2
C:\Windows\System32\drivers\MTConfig.sys 96D604A35070360F0DD4A7A8AF410B5E
C:\Windows\System32\Drivers\mup.sys 619CA29326B82372621DB2C0964D8365
C:\Windows\System32\drivers\mvumis.sys B8C35C94DCB2DFEAF03BB42131F2F77F
C:\Windows\system32\DRIVERS\nwifi.sys 26ACA481FAFEC59FE311D719E3027BBA
C:\Windows\System32\drivers\ndis.sys E4B4BE2D7750849C07589DA0B0AABA01
C:\Windows\system32\DRIVERS\ndiscap.sys C6BB12BC35D1637CA17AE16D3A4725EB
C:\Windows\system32\DRIVERS\NdisImPlatform.sys B1AA3B19A2E596A59224F893E01A5A75
C:\Windows\system32\DRIVERS\ndistapi.sys 9423421E735BD5394351E0C47C76BB92
C:\Windows\system32\DRIVERS\ndisuio.sys B832B35055BA2B7B4181861FF94D8E59
C:\Windows\System32\drivers\NdisVirtualBus.sys 1F58E48EF75F34C35D8E93A0DC535CFE
C:\Windows\system32\DRIVERS\ndiswan.sys DEC29080202D4F9F17F55E18BCFCC41A
C:\Windows\system32\DRIVERS\ndiswan.sys DEC29080202D4F9F17F55E18BCFCC41A
C:\Windows\System32\Drivers\NDProxy.sys A5BD69A8812FA79D1A487691DD3FB244
C:\Windows\System32\drivers\Ndu.sys 5A072F0B90C29C5233D78BE33EF5ED78
C:\Windows\System32\DRIVERS\netbios.sys A83D67D347A684F10B7D3019C8A6380C
C:\Windows\System32\DRIVERS\netbt.sys 0217532E19A748F0E5D569307363D5FD
C:\Windows\system32\DRIVERS\netvsc63.sys 70414DB660BFBB7BD58FCE8EA4364E1B
C:\Windows\System32\Drivers\Npfs.sys 8F44A2F57C9F1A19AC9C6288C10FB351
C:\Windows\System32\drivers\npsvctrig.sys CBDB4F0871C88DF930FC0E8588CA67FC
C:\Windows\System32\drivers\nsiproxy.sys E490B459978CB87779E84C761D22B827
C:\Windows\System32\Drivers\Ntfs.sys 038C77D577900EE39410662478BB0D50
C:\Windows\System32\Drivers\Null.sys EF1B290FC9F0E47CC0B537292BEE5904
C:\Windows\System32\drivers\nvraid.sys BC6B5942AFF25EBAF62DE43C3807EDF8
C:\Windows\System32\drivers\nvstor.sys 1F43ABFFAC3D6CA356851D517392966E
C:\Windows\System32\drivers\nv_agp.sys 6934A936A7369DFE37B7DBA93F5E5E49
C:\Windows\System32\drivers\parport.sys 764B1121867B2D9B31C491668AC72B2B
C:\Windows\System32\drivers\partmgr.sys EF0C1749C9A8CEE9A457473D433CC00F
C:\Windows\System32\drivers\pci.sys 91ED124E261EA8FAA1C0FFDF2A71B0C4
C:\Windows\System32\drivers\pciide.sys 346E38FCC6859A727DD28AFAD1F0AFF4
C:\Windows\System32\drivers\pcmcia.sys 4D3BDCC1C7B40C9D7B6AD990E6DEC397
C:\Windows\System32\drivers\pcw.sys BF28771D1436C88BE1D297D3098B0F7D
C:\Windows\System32\drivers\pdc.sys 24A8DFC07E4BAF29AEA26E383D4CC886
C:\Windows\System32\drivers\peauth.sys 0ECEE590F2E2EF969FB74A6FC583A1E6
C:\Windows\System32\drivers\processr.sys ECD373F9571C745894367CC2635EA44F
C:\Windows\system32\DRIVERS\pacer.sys 8528BB05E4D4E25945F78B00B2555FB7
C:\Windows\system32\drivers\qwavedrv.sys 3FB466684609A4329858CF2EBD62E0FD
C:\Windows\System32\DRIVERS\rasacd.sys 2C56F0EE27E4EF70CA4B4983D3638905
C:\Windows\system32\DRIVERS\raspppoe.sys 5247F308C4103CDC4FE12AE1D235800A
C:\Windows\System32\DRIVERS\rdbss.sys A1A5E79C0D1352AFDC08328A623DA051
C:\Windows\System32\drivers\rdpbus.sys 6B21EBF892CD8CACB71669B35AB5DE32
C:\Windows\System32\drivers\rdpdr.sys 680C1DAE268B6FB67FA21B389A8B79EF
C:\Windows\System32\drivers\rdpvideominiport.sys 9F08A6608F98B5407E7DDBCF306573EF
C:\Windows\System32\drivers\rdyboost.sys A26AEC49F318FEE141DDDB2C5F99B3E6
C:\Windows\System32\Drivers\ReFS.sys E515A287C8FAE901EB8FB42F168E14F2
C:\Windows\System32\drivers\rfcomm.sys 0527EF6E23B9FAB37DDCBC479C6CFA28
C:\Windows\system32\DRIVERS\RtsP2Stor.sys 6A940599A059C6C9D6E54D7A3EF356B8
C:\Windows\system32\DRIVERS\rspndr.sys 2D05A5508F4685412F2B89E8C2189ABC
C:\Windows\system32\DRIVERS\Rt630x64.sys 7CC0D898D00675F14BA0C4BF056C1CF4
C:\Windows\System32\drivers\vms3cap.sys 1A063730F221B2746FF00457AE17E4F0
C:\Windows\System32\drivers\sbp2port.sys C624A1B32211C3166EDB3F4AB02A30B7
C:\Windows\System32\DRIVERS\scfilter.sys ABD0237B15DBD2B4695F4B7D734A58F7
C:\Windows\System32\drivers\sdbus.sys 7B7C482CF48E6EE33664340D1A78E6FE
C:\Windows\System32\drivers\sdstor.sys 0B1E929D11A8E358106955603FAC65E8
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\SerCx.sys DB2FF24CE0BDD15FE75870AFE312BA89
C:\Windows\System32\drivers\SerCx2.sys 0044B31F93946D5D41982314381FE431
C:\Windows\System32\drivers\serenum.sys 3CD600C089C1251BEEB4CD4CD5164F9E
C:\Windows\System32\drivers\serial.sys D864381BC9C725FAB01D94C060660166
C:\Windows\System32\drivers\sermouse.sys 0BD2B65DCE756FDE95A2E5CCCBF7705D
C:\Windows\System32\drivers\sfloppy.sys 472B7A5AC181C050888DB454663DD764
C:\Windows\System32\drivers\SiSRaid2.sys 2F518D13DD6F3053837FE606F1A2EA1F
C:\Windows\System32\drivers\sisraid4.sys 1AC9A200A9C49C4508F04AAFFCA34A3F
C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys 32B3FB238A26267D358D7159B9171505
C:\Windows\System32\drivers\Smb_driver_Intel.sys B71EF473D8B90A2C4DC76B03E382DEE6
C:\Windows\System32\drivers\spaceport.sys 240C5C3793206725AA05665851E8C214
C:\Windows\System32\drivers\SpbCx.sys F337BE11071818FC3F5DC2940B6BDE34
C:\Windows\System32\DRIVERS\srv.sys 6416E79A58A8FCC33A447A4DDDD3BF04
C:\Windows\System32\DRIVERS\srv2.sys 5BED3AB69797C8786EF70AEA8C33748B
C:\Windows\System32\DRIVERS\srvnet.sys D047CD668E6277FD80F0C613946F034C
C:\Windows\System32\drivers\stexstor.sys 366DEA74BBA65B362BCCFC6FC2ADFD8B
C:\Windows\system32\DRIVERS\serscan.sys 2A997C64F9B2584D81FA6749FE36A887
C:\Windows\System32\drivers\storahci.sys 0ED2E318ABB68C1A35A8B8038BDB4C90
C:\Windows\System32\DRIVERS\vmstorfl.sys 7A08CEE1535F5A448215634C5EA74E50
C:\Windows\System32\drivers\stornvme.sys 6B06E2D11E604BE2B1A406C4CB3B90DE
C:\Windows\System32\drivers\storvsc.sys 548759755BC73DAD663250239D7E0B9F
C:\Windows\System32\drivers\swenum.sys 84E0F5D41C138C5CC975137A2A98F6D3
C:\Windows\system32\DRIVERS\SynTP.sys CDA92383EFB52846B7894280A559C330
C:\Windows\System32\drivers\tcpip.sys CCB3A2BB60FE5073F2DEA63FE83CF8FE
C:\Windows\system32\DRIVERS\tcpip.sys CCB3A2BB60FE5073F2DEA63FE83CF8FE
C:\Windows\System32\drivers\tcpipreg.sys 41CF802064F72E55F50CA0A221FD36D4
C:\Windows\system32\DRIVERS\tdx.sys FFF28F9F6823EB1756C60F1649560BBF
C:\Windows\System32\drivers\terminpt.sys 232D185D2337F141311D0CF1983E1431
C:\Windows\system32\drivers\tpm.sys 82F909359600D3603FE852DB7F135626
C:\Windows\System32\drivers\TrueSight.sys FD44FA80DA03EA144153A76DEBBB61B4
C:\Windows\System32\drivers\tsusbflt.sys BF8F54CA37E9C9D6582C31C5761F8C93
C:\Windows\System32\drivers\TsUsbGD.sys E0088068DCE2EE82897027DDB8E05254
C:\Windows\system32\DRIVERS\tunnel.sys C8E0E78B5D284C2FF59BDFFDAF997242
C:\Windows\System32\drivers\uagp35.sys F6EEAD052943B5A3104C1405BB856C54
C:\Windows\System32\drivers\uaspstor.sys FE6067B1FD4E63650C667B33D080565B
C:\Windows\System32\drivers\ucx01000.sys B034A41891A36457B994307DFA772293
C:\Windows\System32\DRIVERS\udfs.sys 1EC649F112896FAE33250F0B97AC5D0B
C:\Windows\System32\drivers\UEFI.sys 9578691F297E1B1F519970FE6D47CB21
C:\Windows\System32\drivers\uliagpkx.sys 5EAB5117DDB24FC4D39E6FFFCF1837B9
C:\Windows\System32\drivers\umbus.sys DA34C39A18E60E7C3FA0630566408034
C:\Windows\System32\drivers\umpass.sys AE8294875E5446E359B1E8035D40C05E
C:\Windows\System32\Drivers\usbaapl64.sys 5C3BE22E485B9BF11FCEFDC676C728D0
C:\Windows\System32\drivers\usbccgp.sys FF78D053A05E5A394F4E3C1816CC65A8
C:\Windows\System32\drivers\usbcir.sys B3D6457D841A0CAEF4C52D88621715F2
C:\Windows\System32\drivers\usbehci.sys 48BA326A3DBA5B5BEB5F2777F4618696
C:\Windows\system32\DRIVERS\usbfilter.sys 504901430B6E03B99EBB6BF26E0868C6
C:\Windows\System32\drivers\usbhub.sys FEF0BC107812B36849741C3211BA6B60
C:\Windows\System32\drivers\UsbHub3.sys 65392F3F3F65E4C6CC82A0F4F8A0B051
C:\Windows\System32\drivers\usbohci.sys 3019097FB6C985EF24C058090FF3BDBD
C:\Windows\System32\drivers\usbprint.sys 4D655E3B684BE9B0F7FFD8A2935C348C
C:\Windows\system32\DRIVERS\usbscan.sys F04D164C4168701A4E7835607722E5F1
C:\Windows\System32\drivers\USBSTOR.SYS 66732C13628BDB1AB0D6FD46027327C2
C:\Windows\System32\drivers\usbuhci.sys 064260B3A5868AC894A4943543BC7AB7
C:\Windows\System32\Drivers\usbvideo.sys 18F744E8CCEB2670040EBAF7AD77B8C6
C:\Windows\System32\drivers\USBXHCI.SYS 48430B0313FC1CFE3D2400553F1A93CD
C:\Windows\System32\drivers\vdrvroot.sys FEB26E3B8345A7E8D62F945C4AE86562
C:\Windows\System32\drivers\VerifierExt.sys A026EDEAA5EECAE0B08E2748B616D4BD
C:\Windows\System32\drivers\vhdmp.sys 52E483A3701A5A61A75A06993720347D
C:\Windows\System32\drivers\viaide.sys 06D38968028E9AB19DE9B618C7B6D199
C:\Windows\System32\drivers\vmbus.sys C6305BDFC4F7CE51F72BB072C03D4ACE
C:\Windows\System32\drivers\VMBusHID.sys DA40BEA0A863CE768C940CA9723BF81F
C:\Windows\System32\drivers\volmgr.sys 55D7D963DE85162F1C49721E502F9744
C:\Windows\System32\drivers\volmgrx.sys CCB9E901F7254BF96D28EB1B0E5329B7
C:\Windows\System32\drivers\volsnap.sys 64CA2B4A49A8EAF495E435623ECCE7DB
C:\Windows\System32\drivers\vpci.sys 01355C98B5C3ED1EC446743CDA848FCE
C:\Windows\System32\drivers\vsmraid.sys 4539F45F9F4C9757A86A56C949421E07
C:\Windows\System32\drivers\vstxraid.sys 0849B7260F26FE05EA56DED0672E2F4B
C:\Windows\System32\drivers\vwifibus.sys BE970C369E43B509C1EDA2B8FA7CECB0
C:\Windows\system32\DRIVERS\vwififlt.sys 35BF5C5F5E3C9902C98978C7640574DA
C:\Windows\system32\DRIVERS\vwifimp.sys 65ED7B9CFEA893DF7748D5FF692690DE
C:\Windows\System32\drivers\wacompen.sys 0910AB9ED404C1434E2D0376C2AD5D8B
C:\Windows\system32\DRIVERS\wanatw64.sys ECEB715BECE47E101DDEC06B11126066
C:\Windows\system32\drivers\WdBoot.sys 0359607177E5E9F6041136CC0A5CB0B6
C:\Windows\System32\drivers\Wdf01000.sys CB6C63FF8342B467E2EF76E98D5B934D
C:\Windows\system32\drivers\WdFilter.sys DE8D12B4C3F55FA2C5E9774314F6C58A
C:\Windows\System32\Drivers\WdNisDrv.sys 4AD874CDC812EC156265E451B6B09DAB
C:\Windows\System32\DRIVERS\wfplwfs.sys BFBE1C5F57FE7A885673A1962D5532B7
C:\Windows\System32\drivers\wimmount.sys 867BCC69ED9C31C501465EB0E8BA9DFA
C:\Windows\System32\drivers\WirelessButtonDriver64.sys 4F2A80D65AE6F845776E2F06AE6782ED
C:\Windows\System32\drivers\wmiacpi.sys 2834D9D3B4F554A39C72F00EA3F0E128
C:\Windows\System32\Drivers\Wof.sys 7FC5667DF73D4B04AA457CC3A4180E09
C:\Windows\System32\DRIVERS\wpcfltr.sys 182561A14F2E93E81E66FE3700D17A5A
C:\Windows\System32\drivers\WpdUpFltr.sys 9F2904B55F6CECCD1A8D986B5CE2609A
C:\Windows\system32\drivers\ws2ifsl.sys AE072B0339D0A18E455DC21666CAD572
C:\Windows\System32\drivers\WSDPrint.sys F586F3F1BF962FE9AE4316E0D896B22F
C:\Windows\system32\DRIVERS\WSDScan.sys D38297814FB6E33655342D869996E617
C:\Windows\System32\drivers\WudfPf.sys D537815E450A149752C15868392AD1F3
C:\Windows\System32\drivers\WUDFRd.sys 7CCBBCEE408A5DBE3FE47297DB5A6CFC
C:\Windows\system32\DRIVERS\WUDFRd.sys 7CCBBCEE408A5DBE3FE47297DB5A6CFC
C:\Windows\system32\DRIVERS\WUDFRd.sys 7CCBBCEE408A5DBE3FE47297DB5A6CFC

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 13:32 - 2015-01-10 13:55 - 00000000 ____D () C:\FRST
2015-01-07 11:30 - 2015-01-07 11:30 - 00000000 ____D () C:\Windows\LastGood.Tmp
2015-01-06 10:37 - 2015-01-06 10:37 - 05970304 _____ (MapsGalaxy) C:\Users\Altieri\Downloads\MapsGalaxySetup2.5.15.8.pd^UX^xdm423^YYA^us.49588_MAPDRIVE-DIRECTIONS-MAPS-main.exe
2015-01-06 10:36 - 2015-01-06 10:36 - 00000000 ____D () C:\Users\Altieri\AppData\Local\IAC
2015-01-06 10:35 - 2015-01-06 10:36 - 00000000 ____D () C:\Users\Altieri\AppData\Local\MapsGalaxy_39
2015-01-06 10:35 - 2015-01-06 10:35 - 00000000 ____D () C:\Program Files (x86)\MapsGalaxy_39
2015-01-04 05:50 - 2015-01-04 05:50 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-04 05:50 - 2015-01-04 05:50 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-01-01 21:53 - 2015-01-01 21:53 - 00001762 _____ () C:\Users\Public\Desktop\iTunes.lnk
2015-01-01 21:53 - 2015-01-01 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-01 21:52 - 2015-01-01 21:53 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-01 21:52 - 2015-01-01 21:53 - 00000000 ____D () C:\Program Files\iTunes
2015-01-01 21:52 - 2015-01-01 21:53 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-01 21:52 - 2015-01-01 21:52 - 00000000 ____D () C:\Program Files\iPod
2015-01-01 21:16 - 2015-01-01 21:16 - 00000226 _____ () C:\Users\Altieri\Desktop\How to enable or disable notifications of vulnerabilities in Wi-Fi networks in Kaspersky Internet Security 2015.url
2014-12-29 16:42 - 2014-12-31 11:34 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\27355C5C.sys
2014-12-29 15:27 - 2014-12-29 15:27 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7E9A22C0.sys
2014-12-27 09:47 - 2014-12-27 09:47 - 08200192 _____ () C:\Users\Altieri\Downloads\TouchCopy12 (2).msi
2014-12-27 09:45 - 2014-12-27 09:45 - 08200192 _____ () C:\Users\Altieri\Downloads\TouchCopy12 (1).msi
2014-12-27 09:37 - 2015-01-01 20:59 - 00000000 ____D () C:\Users\Altieri\AppData\Local\Wide Angle Software
2014-12-27 09:37 - 2014-12-27 09:58 - 00002643 _____ () C:\Users\Public\Desktop\TouchCopy 12.lnk
2014-12-27 09:37 - 2014-12-27 09:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TouchCopy 12
2014-12-27 09:37 - 2014-12-27 09:37 - 00000000 ____D () C:\Users\Altieri\AppData\Local\{2A82324E-1E3C-4E88-A68A-8BA11B0417FE}
2014-12-27 09:37 - 2014-12-27 09:37 - 00000000 ____D () C:\Program Files (x86)\Wide Angle Software
2014-12-27 09:34 - 2014-12-27 09:58 - 08200192 _____ () C:\Users\Altieri\Downloads\TouchCopy12.msi
2014-12-27 06:27 - 2015-01-01 05:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-24 14:30 - 2014-12-24 14:30 - 00003254 _____ () C:\Users\Altieri\Documents\LOI
2014-12-22 16:16 - 2014-12-22 16:16 - 00000138 _____ () C:\Users\Altieri\Desktop\Welcome.url
2014-12-22 14:12 - 2014-12-22 14:12 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-12-21 22:56 - 2014-12-21 22:56 - 00001012 _____ () C:\Users\Public\Desktop\AOL Desktop 9.6.lnk
2014-12-21 22:56 - 2014-12-21 22:56 - 00000946 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\AOL Desktop 9.6.lnk
2014-12-21 22:56 - 2014-12-21 22:56 - 00000000 ____D () C:\ProgramData\AOL OCP
2014-12-21 22:55 - 2014-12-21 22:57 - 00000000 ____D () C:\Program Files (x86)\AOL Desktop 9.6
2014-12-21 07:29 - 2014-12-21 07:29 - 00000164 _____ () C:\Users\Altieri\Desktop\Electronics, Cars, Fashion, Collectibles, Coupons and More eBay.url
2014-12-21 07:28 - 2014-12-21 07:28 - 00000174 _____ () C:\Users\Altieri\Desktop\Small Business Information, Resources and Tools - Winmark Business Solutions.url
2014-12-21 07:27 - 2014-12-21 07:27 - 00002275 _____ () C:\Users\Altieri\Desktop\HP Photosmart 7520 series.lnk
2014-12-21 07:27 - 2014-12-21 07:27 - 00000185 _____ () C:\Users\Altieri\Desktop\Pandora Radio - Listen to Free Internet Radio, Find New Music.url
2014-12-21 07:25 - 2014-12-21 07:25 - 00000202 _____ () C:\Users\Altieri\Desktop\Accounts - Citibank.url
2014-12-21 06:50 - 2015-01-03 20:30 - 00004964 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Envy-Altieri Envy
2014-12-20 13:56 - 2014-12-20 13:56 - 00022528 _____ () C:\Users\Altieri\AppData\Local\dsisetup14803752.exe
2014-12-20 13:36 - 2014-12-20 13:36 - 00000138 _____ () C:\Users\Altieri\Desktop\Profitmastery-university.url
2014-12-20 13:35 - 2014-12-20 13:35 - 00000182 _____ () C:\Users\Altieri\Desktop\Google.url
2014-12-20 10:14 - 2014-12-20 10:14 - 01052672 _____ (Adobe) C:\Users\Altieri\Downloads\install_flashplayer16x32_mssa_aaa_aih.exe
2014-12-20 10:06 - 2014-12-20 10:06 - 00000000 ____D () C:\Users\Default\AppData\Local\PerforMax Cleaner
2014-12-20 10:06 - 2014-12-20 10:06 - 00000000 ____D () C:\Users\Default User\AppData\Local\PerforMax Cleaner
2014-12-20 09:57 - 2014-12-20 16:25 - 00000000 ____D () C:\ProgramData\UAB
2014-12-20 09:57 - 2014-12-20 13:34 - 00003546 _____ () C:\Windows\System32\Tasks\Driver Support
2014-12-20 09:57 - 2014-12-20 09:57 - 00003788 _____ () C:\Windows\System32\Tasks\Driver Support-RTMScan
2014-12-20 09:57 - 2014-12-20 09:57 - 00003750 _____ () C:\Windows\System32\Tasks\Driver Support-RTMUpdater
2014-12-20 09:57 - 2014-12-20 09:57 - 00003736 _____ () C:\Windows\System32\Tasks\Driver Support-RTMRules
2014-12-20 09:56 - 2014-12-20 09:56 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support
2014-12-20 09:56 - 2014-12-20 09:56 - 00000000 ____D () C:\Users\Altieri\AppData\Local\PC_Drivers_Headquarters
2014-12-20 09:56 - 2014-12-20 09:56 - 00000000 ____D () C:\ProgramData\Driver Support
2014-12-20 09:56 - 2014-12-20 09:56 - 00000000 ____D () C:\ProgramData\{BFD9571A-EF5B-869C-5EDD-F61E8E5F2590}
2014-12-20 09:56 - 2014-12-20 09:56 - 00000000 ____D () C:\Program Files (x86)\Driver Support
2014-12-19 17:23 - 2014-09-05 20:02 - 00168104 ____N (Geek Squad) C:\Users\Public\Desktop\Geek Squad Support.exe
2014-12-19 17:21 - 2014-12-19 17:21 - 00002115 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-12-19 17:21 - 2014-12-19 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-12-19 17:21 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-12-19 17:20 - 2015-01-10 10:22 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-12-19 17:20 - 2014-12-19 17:20 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-12-19 17:20 - 2014-08-12 18:32 - 00247480 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-12-19 16:57 - 2014-12-17 13:24 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-12-19 16:57 - 2014-12-17 13:24 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-12-19 16:57 - 2014-12-17 13:24 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-12-17 13:42 - 2014-12-17 13:42 - 00002242 _____ () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (4).lnk
2014-12-17 13:42 - 2014-12-17 13:42 - 00000020 ___SH () C:\Users\Altieri\ntuser.ini
2014-12-17 13:24 - 2014-12-19 16:57 - 00000000 ____D () C:\Program Files (x86)\Java
2014-12-17 13:24 - 2014-12-17 13:25 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-17 13:24 - 2014-12-17 13:24 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-12-17 13:24 - 2014-12-17 13:24 - 00000000 ____D () C:\ProgramData\Sun
2014-12-17 13:24 - 2014-12-17 13:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-17 13:23 - 2014-12-20 14:35 - 00000000 ____D () C:\Users\Altieri\AppData\Local\Adobe
2014-12-17 13:11 - 2014-12-17 13:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-17 13:01 - 2015-01-01 21:27 - 00000000 ____D () C:\Users\Altieri\Desktop\Desktop Items
2014-12-17 12:53 - 2014-12-17 12:53 - 00002242 _____ () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (3).lnk
2014-12-17 12:51 - 2014-10-30 06:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-17 12:41 - 2014-12-17 12:41 - 00002242 _____ () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (2).lnk
2014-12-17 02:58 - 2014-12-17 02:58 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-12-16 20:56 - 2014-12-16 20:56 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-16 20:41 - 2014-12-16 20:41 - 00002242 _____ () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote.lnk
2014-12-16 20:39 - 2014-12-16 20:39 - 01184024 _____ () C:\Users\Altieri\Downloads\PreConnectUS_tqz4cj45zwfv332rrznle3ma.exe
2014-12-16 20:12 - 2014-10-30 17:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-16 20:12 - 2014-10-30 17:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-16 20:08 - 2014-11-09 21:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-16 20:08 - 2014-11-09 20:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-16 20:08 - 2014-10-30 18:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-16 20:08 - 2014-10-30 18:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-16 20:05 - 2014-12-03 18:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-16 20:05 - 2014-12-03 18:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-16 20:05 - 2014-12-02 18:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-16 20:05 - 2014-12-02 18:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-16 20:05 - 2014-12-02 18:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-16 20:05 - 2014-12-02 18:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-16 20:05 - 2014-12-02 18:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-16 20:04 - 2014-11-21 22:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-16 20:04 - 2014-11-21 21:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-16 20:04 - 2014-11-21 21:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-16 20:04 - 2014-11-21 21:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-16 20:04 - 2014-11-21 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-16 20:04 - 2014-11-21 21:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-16 20:04 - 2014-11-21 21:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-16 20:04 - 2014-11-21 21:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-16 20:04 - 2014-11-21 21:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-16 20:04 - 2014-11-21 21:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-16 20:04 - 2014-11-21 21:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-16 20:04 - 2014-11-21 21:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-16 20:04 - 2014-11-21 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-16 20:04 - 2014-11-21 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-16 20:04 - 2014-11-21 21:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-16 20:04 - 2014-11-21 20:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-16 20:04 - 2014-11-21 20:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-16 20:04 - 2014-11-21 20:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-16 20:04 - 2014-11-21 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-16 20:04 - 2014-11-21 20:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-16 20:04 - 2014-11-21 20:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-16 20:04 - 2014-11-21 20:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-16 20:04 - 2014-11-21 20:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-16 20:04 - 2014-11-21 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-16 20:04 - 2014-11-21 20:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-16 20:04 - 2014-11-21 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-16 20:04 - 2014-11-21 20:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-16 20:04 - 2014-11-21 20:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-16 20:04 - 2014-11-21 20:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-16 20:04 - 2014-11-21 20:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-16 20:04 - 2014-11-21 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-16 20:04 - 2014-11-21 20:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-16 20:04 - 2014-11-21 20:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-16 20:04 - 2014-11-21 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-16 20:04 - 2014-11-21 20:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-16 20:04 - 2014-11-21 20:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-16 20:04 - 2014-11-21 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-16 20:04 - 2014-11-21 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-16 20:04 - 2014-11-21 19:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-16 20:04 - 2014-11-06 23:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-16 20:04 - 2014-11-06 22:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-16 20:04 - 2014-10-31 18:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-16 20:04 - 2014-10-31 18:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-16 20:04 - 2014-10-12 21:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-16 20:04 - 2014-10-12 21:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-16 20:04 - 2014-10-12 21:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-16 20:04 - 2014-10-12 21:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-16 19:25 - 2014-12-16 19:25 - 00000000 _____ () C:\Recovery.txt
2014-12-16 13:41 - 2014-12-16 13:41 - 00000000 ____D () C:\Users\jalt6_000\Documents\Avatar
2014-12-16 13:41 - 2014-12-16 13:41 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\CyberLink
2014-12-16 03:40 - 2014-12-16 03:40 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\WildTangent
2014-12-16 02:24 - 2014-12-16 02:24 - 00000000 ____D () C:\Users\Altieri\AppData\Local\speed browser
2014-12-16 00:53 - 2014-12-16 02:37 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-12-16 00:48 - 2014-12-16 18:20 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\Search Extensions
2014-12-15 20:45 - 2014-12-15 20:45 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Nuance
2014-12-15 17:02 - 2014-12-15 17:02 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\speed browser
2014-12-15 12:07 - 2014-12-15 14:23 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\HpUpdate
2014-12-15 12:05 - 2014-12-15 12:05 - 00003254 _____ () C:\Users\jalt6_000\Documents\Letterof.txt
2014-12-13 09:09 - 2014-12-13 09:09 - 00000203 _____ () C:\Users\jalt6_000\Desktop\Sign On - Citibank.url
2014-12-13 07:49 - 2014-12-16 03:50 - 00000182 _____ () C:\Users\jalt6_000\Desktop\Google.url
2014-12-13 07:48 - 2014-12-13 07:48 - 00000000 __SHD () C:\Users\jalt6_000\AppData\Local\EmieUserList
2014-12-13 07:48 - 2014-12-13 07:48 - 00000000 __SHD () C:\Users\jalt6_000\AppData\Local\EmieSiteList
2014-12-13 07:48 - 2014-12-13 07:48 - 00000000 __SHD () C:\Users\jalt6_000\AppData\Local\EmieBrowserModeList
2014-12-13 07:48 - 2014-12-13 07:48 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\FinanceAlert
2014-12-12 19:14 - 2014-12-12 19:14 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Macromedia
2014-12-12 19:14 - 2014-12-12 19:14 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\AOL
2014-12-12 19:01 - 2014-12-16 18:20 - 00000000 ___RD () C:\Users\jalt6_000\OneDrive
2014-12-12 18:57 - 2014-12-16 02:50 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Apple Computer
2014-12-12 18:45 - 2014-12-16 13:41 - 00000000 ____D () C:\Users\jalt6_000\Documents\Youcam
2014-12-12 18:44 - 2014-12-16 00:41 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\VirtualStore
2014-12-12 18:44 - 2014-12-12 19:01 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\Packages
2014-12-12 18:44 - 2014-12-12 18:44 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Synaptics
2014-12-12 18:44 - 2014-12-12 18:44 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Adobe
2014-12-12 18:44 - 2014-12-12 18:44 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\Hewlett-Packard
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ___RD () C:\Users\jalt6_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ___RD () C:\Users\jalt6_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ___RD () C:\Users\jalt6_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ____D () C:\Users\jalt6_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ____D () C:\Users\jalt6_000\AppData\Local\Pokki
2014-12-12 18:43 - 2014-12-16 18:20 - 00000000 ____D () C:\Users\jalt6_000
2014-12-12 18:43 - 2014-06-11 03:30 - 00000000 ___HD () C:\Users\jalt6_000\Documents\hp.system.package.metadata
2014-12-12 12:48 - 2014-12-12 12:48 - 00000000 ____D () C:\Users\Altieri\AppData\Local\FinanceAlert
2014-12-12 12:47 - 2014-12-20 10:05 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\Mozilla
2014-12-12 12:47 - 2014-12-12 12:47 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\Yahoo!
2014-12-12 12:47 - 2014-12-12 12:47 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeParlor
2014-12-12 12:47 - 2014-12-12 12:47 - 00000000 ____D () C:\ProgramData\Yahoo!
2014-12-12 12:47 - 2014-12-12 12:47 - 00000000 ____D () C:\Program Files (x86)\Yahoo!
2014-12-11 13:59 - 2014-12-19 16:36 - 00000000 ____D () C:\Users\Altieri\AppData\Local\LogMeIn Rescue Applet

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 13:44 - 2014-11-13 15:44 - 00000310 _____ () C:\Windows\Tasks\UpdaterEX.job
2015-01-10 13:43 - 2014-11-11 22:26 - 01206994 _____ () C:\Windows\WindowsUpdate.log
2015-01-10 13:24 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-10 10:25 - 2014-11-11 18:37 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{BA0C3145-F3F6-4814-BE04-E45AEFFCD246}
2015-01-10 10:21 - 2013-08-22 09:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-09 22:06 - 2014-09-29 15:33 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2015-01-09 07:48 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-08 13:15 - 2014-11-11 14:24 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2420055085-2475560592-1041023855-1002
2015-01-07 11:33 - 2014-03-18 04:53 - 00956476 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-07 11:30 - 2013-08-22 09:46 - 00032051 _____ () C:\Windows\setupact.log
2015-01-03 20:33 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-01 21:52 - 2014-11-13 15:47 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-12-31 11:08 - 2014-11-11 22:26 - 00000000 ____D () C:\Users\Altieri
2014-12-28 08:09 - 2014-03-18 04:44 - 00038612 _____ () C:\Windows\PFRO.log
2014-12-27 07:51 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-27 01:51 - 2014-09-29 15:47 - 00000000 ____D () C:\ProgramData\TEMP
2014-12-26 11:43 - 2014-09-01 03:18 - 00000935 _____ () C:\Users\jalt6_000\AppData\Roaming\OFG
2014-12-25 20:52 - 2013-08-22 08:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-12-25 18:05 - 2014-11-18 18:44 - 00000193 _____ () C:\Users\Altieri\AppData\Roaming\WB.CFG
2014-12-22 14:12 - 2014-11-30 12:33 - 00000000 ____D () C:\ProgramData\Skype
2014-12-22 14:12 - 2014-11-30 12:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-22 13:55 - 2014-12-07 11:38 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-21 22:56 - 2014-11-16 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL
2014-12-21 22:56 - 2014-11-16 19:11 - 00063299 _____ () C:\install.log
2014-12-21 22:55 - 2014-11-16 19:13 - 00000000 ____D () C:\ProgramData\AOL
2014-12-21 08:39 - 2014-09-29 15:33 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-20 13:56 - 2014-11-21 13:44 - 00000001 _____ () C:\Users\Altieri\AppData\Local\DSI.DAT
2014-12-20 10:05 - 2014-11-16 19:14 - 00058696 _____ (AOL Inc.) C:\Windows\SysWOW64\AOLParconLink.exe
2014-12-19 18:04 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\rescache
2014-12-19 17:28 - 2014-08-20 18:04 - 00799944 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-12-19 17:28 - 2014-08-18 14:43 - 00150536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-12-19 17:28 - 2014-08-13 19:34 - 00077512 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys
2014-12-19 17:28 - 2014-07-25 13:13 - 00068616 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys
2014-12-19 17:23 - 2014-11-11 14:42 - 00000000 ____D () C:\ProgramData\Geek Squad
2014-12-19 17:20 - 2013-08-22 10:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-12-19 16:39 - 2014-11-11 22:27 - 00000000 ____D () C:\Users\Altieri\AppData\Local\Packages
2014-12-17 13:20 - 2014-11-29 12:19 - 00000000 ____D () C:\Users\Altieri\AppData\Local\AMD
2014-12-17 13:15 - 2014-11-13 15:48 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-12-17 13:04 - 2013-08-22 10:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-17 12:55 - 2013-10-30 11:58 - 00000000 ____D () C:\Users\Altieri\Documents\Youcam
2014-12-17 12:41 - 2014-11-30 14:26 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\Skype
2014-12-17 02:58 - 2014-11-13 15:44 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\UpdaterEX
2014-12-16 20:56 - 2014-11-11 18:14 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-16 20:56 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-16 20:56 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-16 20:32 - 2014-12-08 11:19 - 00000000 ____D () C:\Users\Altieri\AppData\Roaming\HpUpdate
2014-12-16 20:18 - 2014-11-11 17:50 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-16 20:14 - 2014-11-11 17:50 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-16 19:57 - 2014-11-11 19:44 - 00002132 _____ () C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk
2014-12-16 19:56 - 2014-11-11 22:27 - 00000000 ____D () C:\Users\Altieri\AppData\Local\Pokki
2014-12-16 19:48 - 2014-12-08 11:19 - 00000000 ____D () C:\ProgramData\Visan
2014-12-16 19:48 - 2014-12-08 11:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-16 19:48 - 2014-12-08 11:19 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-12-16 19:48 - 2014-12-08 11:18 - 00000000 ____D () C:\Users\Altieri\AppData\Local\HP
2014-12-16 19:48 - 2014-12-07 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-16 19:48 - 2014-11-11 22:30 - 00000000 ____D () C:\Users\Altieri\AppData\Local\CyberLink
2014-12-16 19:48 - 2014-09-29 15:48 - 00000000 ____D () C:\ProgramData\install_clap
2014-12-16 19:48 - 2014-06-11 03:33 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 __RSD () C:\Windows\Media
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\WinStore
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\th-TH
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\he-IL
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\et-EE
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\Globalization
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\FileManager
2014-12-16 19:48 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\Camera
2014-12-16 19:47 - 2014-12-08 11:19 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-12-16 19:47 - 2014-11-30 12:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-16 19:47 - 2014-09-29 15:40 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-16 19:39 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\registration
2014-12-16 19:37 - 2013-08-22 08:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-12-16 19:36 - 2014-11-11 15:30 - 00000000 ____D () C:\Users\Public\CyberLink
2014-12-16 19:36 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\AppCompat
2014-12-16 19:35 - 2014-11-30 14:26 - 00000000 ____D () C:\Users\Altieri\AppData\Local\Skype
2014-12-16 19:34 - 2014-11-20 20:07 - 00000000 ____D () C:\ProgramData\HP
2014-12-16 19:29 - 2014-12-08 11:19 - 00000000 ____D () C:\Program Files\HP
2014-12-16 19:29 - 2014-12-08 11:16 - 00000000 ____D () C:\Program Files (x86)\Hp
2014-12-16 19:29 - 2014-06-11 03:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-12-16 19:28 - 2014-12-07 11:54 - 00000000 __RHD () C:\MSOCache
2014-12-16 19:28 - 2014-09-29 15:48 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-12-16 16:52 - 2013-08-22 09:44 - 00491624 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-16 03:23 - 2013-08-22 10:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-11 10:44 - 2014-11-17 13:07 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

Some content of TEMP:
====================
C:\Users\Altieri\AppData\Local\Temp\AcsInstall.dll
C:\Users\Altieri\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Altieri\AppData\Local\Temp\DriverSupport.exe
C:\Users\Altieri\AppData\Local\Temp\SHFOLDER.DLL

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-12-19 17:33

==================== End Of Log ============================

#9
joe1167

Posted 11 January 2015 - 05:27 AM

Member

Topic Starter
Member
26 posts

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4 Elements II (x32 Version: 2.2.0.98 - WildTangent) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9E8542D5-EC57-3E45-13FE-AC6CA55FD9E2}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AOL Uninstaller (Choose which Products to Remove) (HKLM-x32\...\AOL Uninstaller) (Version: - AOL Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Azkend 2: The World Beneath (x32 Version: 2.2.0.98 - WildTangent) Hidden
Barn Yarn Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot Mysteries (x32 Version: 3.0.2.51 - WildTangent) Hidden
Building the Great Wall of China Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden
Curse at Twilight (x32 Version: 3.0.2.51 - WildTangent) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.6.3728 - CyberLink Corp.)
CyberLink MediaEspresso 6.7 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.7.1.5112 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.4.4824 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.6.3821 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.6.3912 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)
Delicious - Emily's Wonder Wedding Premium Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Dragon NaturallySpeaking 12 (HKLM-x32\...\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}) (Version: 12.00.100 - Nuance Communications Inc.)
Driver Support (HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\DriverSupport) (Version: 9.1.5.4 - PC Drivers HeadQuarters LP)
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
Evernote v. 5.2 (HKLM-x32\...\{412F6426-A3C7-11E3-8A71-00163E98E7D6}) (Version: 5.2.0.2951 - Evernote Corp.)
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Fishdom 3: Collector's Edition (x32 Version: 3.0.2.38 - WildTangent) Hidden
Fort Defense (x32 Version: 3.0.2.51 - WildTangent) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Host App Service (HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\Pokki) (Version: 0.269.4.112 - Pokki)
HP 3D DriveGuard (HKLM-x32\...\{F90A86C9-7779-47DD-AC06-8EE832C55F55}) (Version: 6.0.18.1 - Hewlett-Packard Company)
HP CoolSense (HKLM-x32\...\{E2C8D0C2-1C97-4C05-939A-5B13A0FE655C}) (Version: 2.20.31 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{4C0ABC2F-CC83-4417-8B3E-A26A04FBB860}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 7520 series Basic Device Software (HKLM\...\{27ABA988-D480-4F44-B0FD-45E5656D2CFE}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 7520 series Help (HKLM-x32\...\{08295D09-E002-48F8-905D-34E4B08509BA}) (Version: 28.0.0 - Hewlett Packard)
HP Photosmart 7520 series Product Improvement Study (HKLM\...\{16B872EE-C458-41BD-BEAE-52758A3F3168}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7493.4758 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{44157EB3-D8D0-4BB1-B0F5-AD2C38814ED1}) (Version: 11.51.0027 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{E9FA2CA2-B7B2-43E6-8449-A1618B042EAE}) (Version: 1.1.3 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Utility Center (HKLM\...\{36F80C5F-DC0D-4DF4-AF09-DC1867F0EB0A}) (Version: 2.4.4 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Joining Hands 2 (x32 Version: 3.0.2.51 - WildTangent) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden
Lost in Reefs 2 (x32 Version: 3.0.2.51 - WildTangent) Hidden
LUXOR Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
MapsGalaxy Internet Explorer Toolbar (HKLM-x32\...\MapsGalaxy_39bar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION
Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mystery P.I. - Curious Case of Counterfeit Cove (x32 Version: 2.2.0.98 - WildTangent) Hidden
OEM Application Profile (HKLM-x32\...\{8F92E0CF-620B-5C20-F292-59C93567B06D}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pinger (HKLM-x32\...\Pinger 1.4.0.1) (Version: 1.4.0.1 - Pinger Inc.)
Pinger (x32 Version: 1.4.0.1 - Pinger Inc.) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.51 - WildTangent) Hidden
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29075 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.24.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7231 - Realtek Semiconductor Corp.)
Roads of Rome 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Solitaire Mystery Four Seasons (x32 Version: 3.0.2.51 - WildTangent) Hidden
Sparkle 2 (x32 Version: 3.0.2.51 - WildTangent) Hidden
Start Menu (HKU\S-1-5-21-2420055085-2475560592-1041023855-1002\...\Pokki_Start_Menu) (Version: 0.269.4.112 - Pokki)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.7.8 - Synaptics Incorporated)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TouchCopy 12 (HKLM-x32\...\{EB775F20-F363-4A01-8A89-3C89AE1E373D}) (Version: 12.53 - Wide Angle Software)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
Viewpoint Media Player (HKLM-x32\...\ViewpointMediaPlayer) (Version: - )
Viking Saga (x32 Version: 3.0.2.48 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App for HP (x32 Version: 4.0.11.2 - WildTangent) Hidden
Youda Jewel Shop (x32 Version: 3.0.2.51 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

17-12-2014 13:39:14 Geek Squad
20-12-2014 09:56:15 PerforMax Cleaner
27-12-2014 09:36:43 Installed TouchCopy 12
01-01-2015 21:17:26 Removed iTunes

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {060D6812-C72F-461E-ABCD-577D6DE3A29D} - System32\Tasks\Driver Support => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2014-12-15] (PC Drivers Headquarters)
Task: {0A7389FB-FAF2-43D3-AF09-1106EE051102} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-12-08] (Microsoft Corporation)
Task: {205862C3-8BA8-4015-AD86-A1B7BF8AE61B} - \Apple\AppleSoftwareUpdate No Task File <==== ATTENTION
Task: {36183C3A-3CBD-40FC-8414-451449768801} - \YCMServiceAgent No Task File <==== ATTENTION
Task: {47BFE674-5DFA-4395-B88C-47D28D6E5597} - \Microsoft\Windows\Maintenance\WinSAT No Task File <==== ATTENTION
Task: {4F1B05F3-C4B9-423C-96B0-231FE8B61232} - \Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan No Task File <==== ATTENTION
Task: {73815C8E-7996-4911-A1F5-B856B8876574} - \UpdaterEX No Task File <==== ATTENTION
Task: {825F7D5D-4E9D-453A-869C-367C0EF853AF} - \HPCustParticipation HP Photosmart 7520 series No Task File <==== ATTENTION
Task: {8C47EEF4-F265-4E21-8E39-19AC4D048FA5} - System32\Tasks\Driver Support-RTMRules => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2014-12-15] (PC Drivers Headquarters)
Task: {A9917180-06BF-468C-AEC0-EDA8DD5D554E} - \Hewlett-Packard\HP Support Assistant\Update Check No Task File <==== ATTENTION
Task: {B30AB67C-79D0-40ED-98E6-C01C6DFCF04E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-12-08] (Microsoft Corporation)
Task: {B8587EC1-A2DC-45F7-9D7A-08E8E655C4F0} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis No Task File <==== ATTENTION
Task: {C10B1070-97AD-49EA-A69A-44103728BD4A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {D1889F01-5BAD-4953-94B4-12FC39AAA37A} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start No Task File <==== ATTENTION
Task: {E3ECB89D-1DCC-4E23-A0E3-5832DA46B824} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-16] (Microsoft Corporation)
Task: {E406DC45-48BF-4CA3-B92D-13B2C5744495} - System32\Tasks\Driver Support-RTMUpdater => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2014-12-15] (PC Drivers Headquarters)
Task: {EF4E235D-1963-4CDB-8B33-3CFDF77C7AEA} - \Hewlett-Packard\HP Support Assistant\WarrantyChecker_CND8F4C9MQ No Task File <==== ATTENTION
Task: {F4E5FF0E-CB74-4180-AEAA-BEDD85380447} - \Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon No Task File <==== ATTENTION
Task: {F61C1098-6385-4992-9119-CE0F68340314} - \Microsoft\Windows\Servicing\StartComponentCleanup No Task File <==== ATTENTION
Task: {FAA62279-0D79-4D78-A3F5-342C9FB2A30A} - System32\Tasks\Driver Support-RTMScan => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2014-12-15] (PC Drivers Headquarters)
Task: {FDDA8974-F562-4770-85CD-4666F737E9EB} - \Hewlett-Packard\HP Support Assistant\WarrantyChecker No Task File <==== ATTENTION
Task: {FF95B5A7-22AB-4D24-886F-C07A4593F508} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Envy-Altieri Envy => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)
Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\Altieri\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-03-28 15:31 - 2014-03-28 15:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2014-03-28 15:27 - 2014-03-28 15:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2014-03-28 15:27 - 2014-03-28 15:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-03-28 15:27 - 2014-03-28 15:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2014-03-28 15:48 - 2014-03-28 15:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2014-03-28 15:48 - 2014-03-28 15:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2014-06-01 00:13 - 2014-06-01 00:13 - 00140288 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2014-06-01 00:12 - 2014-06-01 00:12 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-12-07 11:38 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-07 11:40 - 2014-12-08 10:55 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-03-28 15:36 - 2014-03-28 15:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll
2011-04-25 16:52 - 2011-04-25 16:52 - 00048640 _____ () C:\Program Files (x86)\AOL Desktop 9.6\zlib.dll
2011-04-25 16:52 - 2011-04-25 16:52 - 00094208 _____ () C:\Program Files (x86)\AOL Desktop 9.6\Components\Tier2Svc.dll
2011-04-25 16:52 - 2011-04-25 16:52 - 00060928 _____ () C:\Program Files (x86)\AOL Desktop 9.6\Components\DataSvcs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8
AlternateDataStreams: C:\Users\jalt6_000\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrator (S-1-5-21-2420055085-2475560592-1041023855-500 - Administrator - Disabled)
Altieri (S-1-5-21-2420055085-2475560592-1041023855-1002 - Administrator - Enabled) => C:\Users\Altieri
Guest (S-1-5-21-2420055085-2475560592-1041023855-501 - Limited - Disabled)
jalt6_000 (S-1-5-21-2420055085-2475560592-1041023855-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (01/10/2015 10:38:36 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/09/2015 03:10:50 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/08/2015 06:13:06 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 04:51:40 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 10:45:27 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 10:26:50 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: There was an error with the Windows Location Provider database

Error: (01/05/2015 09:35:40 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/02/2015 10:42:57 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/01/2015 09:50:33 PM) (Source: MsiInstaller) (EventID: 10005) (User: Envy)
Description: Product: iTunes -- This iTunes installer is intended for 32-bit versions of Windows. Please download and install the 64-bit iTunes installer instead.

Error: (01/01/2015 09:50:06 PM) (Source: MsiInstaller) (EventID: 10005) (User: Envy)
Description: Product: iTunes -- This iTunes installer is intended for 32-bit versions of Windows. Please download and install the 64-bit iTunes installer instead.

System errors:
=============
Error: (01/10/2015 11:20:45 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/10/2015 11:14:44 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/10/2015 11:11:46 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/10/2015 11:08:38 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/10/2015 11:08:36 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/10/2015 10:21:38 AM) (Source: APPHOSTSVC) (EventID: 9010) (User: )
Description: The Application Host Helper Service encountered an error trying to access the root history directory 'C:\inetpub\history'. The directory either doesn't exist or the permissions on it don't allow the history service to access it. The config history feature is disabled for now and will be re-enabled after the issue is resolved. To resolve this issue, please ensure that the directory exists and that the Administrators group have read and write access to it. The data field contains the error number.

Error: (01/09/2015 10:00:39 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/09/2015 09:58:56 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/09/2015 09:58:43 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 43. The Windows SChannel error state is 252.

Error: (01/09/2015 09:56:44 PM) (Source: APPHOSTSVC) (EventID: 9010) (User: )
Description: The Application Host Helper Service encountered an error trying to access the root history directory 'C:\inetpub\history'. The directory either doesn't exist or the permissions on it don't allow the history service to access it. The config history feature is disabled for now and will be re-enabled after the issue is resolved. To resolve this issue, please ensure that the directory exists and that the Administrators group have read and write access to it. The data field contains the error number.

Microsoft Office Sessions:
=========================
Error: (01/10/2015 10:38:36 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/09/2015 03:10:50 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/08/2015 06:13:06 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 04:51:40 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 10:45:27 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/06/2015 10:26:50 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: -2147024883

Error: (01/05/2015 09:35:40 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (01/02/2015 10:42:57 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

CodeIntegrity Errors:
===================================
Date: 2014-12-17 13:48:20.148
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.913
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.773
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.616
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.429
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.195
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:19.016
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:18.838
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:18.645
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-17 13:48:18.473
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: AMD FX-7500 Radeon R7, 10 Compute Cores 4C+6G
Percentage of memory in use: 36%
Total physical RAM: 5090.07 MB
Available physical RAM: 3255.71 MB
Total Pagefile: 5922.07 MB
Available Pagefile: 3698.96 MB
Total Virtual: 131072 MB
Available Virtual: 131071.76 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:670.16 GB) (Free:587.47 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:27.45 GB) (Free:2.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 1E1F4777)

Partition: GPT Partition Type.

==================== End Of Log ============================

#10
joe1167

Posted 11 January 2015 - 05:28 AM

Member

Topic Starter
Member
26 posts

_{(The entries could be listed to be restored or removed.)}

_{Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\AOL Desktop 9.6.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Dragon NaturallySpeaking 12.0.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\NatSpeakS_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk -> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Flexera Software LLC.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camera.lnk -> C:\Windows\Camera\Camera.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk -> C:\Windows\FileManager\FileManager.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotosApp.lnk -> C:\Windows\FileManager\PhotosApp.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk -> C:\Windows\WinStore\WinStore.htm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TouchCopy 12\Software Licence.lnk -> C:\Windows\Installer\{EB775F20-F363-4A01-8A89-3C89AE1E373D}\_56785C5285921D18765F1E.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TouchCopy 12\Terms and Conditions.lnk -> C:\Windows\Installer\{EB775F20-F363-4A01-8A89-3C89AE1E373D}\_FED4AA1D60D990BA52DFF5.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TouchCopy 12\TouchCopy 12.lnk -> C:\Windows\Installer\{EB775F20-F363-4A01-8A89-3C89AE1E373D}\_7A45852A246EA828B4BBBF.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype for desktop.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection\HP SimplePass.lnk -> C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe (Hewlett-Packard)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\CyberLink Power2Go.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\Power2Go8.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\Desktop Burning Gadget.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\Evernote.lnk -> C:\Windows\Installer\{412F6426-A3C7-11E3-8A71-00163E98E7D6}\Evernote.ico ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\HP Utility Center.lnk -> C:\Program Files\Hewlett-Packard\HP Utility Center\HPUC.exe (Hewlett-Packard Development Company, L.P.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\ISO Viewer.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\IsoViewer8.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools\Virtual Drive.lnk -> C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\Beats Audio.lnk -> C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\CyberLink Media Suite.lnk -> C:\Program Files (x86)\CyberLink\Media Suite\PS.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\CyberLink MediaEspresso.lnk -> C:\Program Files (x86)\CyberLink\MediaEspresso\MediaEspresso.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\CyberLink PhotoDirector.lnk -> C:\Program Files (x86)\CyberLink\PhotoDirector\PhotoDirector3.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\CyberLink PowerDirector 10.lnk -> C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\HP Quick Access to Miracast.lnk -> C:\Program Files\Hewlett-Packard\HP Quick Access to Miracast\HP Quick Access to Miracast.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\Silverlight.Configuration.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Access 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\msaccess.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Excel 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\excel.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Filler 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\infopath.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Lync 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\lync.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneDrive for Business 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\groove.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneNote 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTE.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Outlook 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\outlook.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\PowerPoint 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\POWERPNT.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Publisher 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\mspub.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Send to OneNote 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\winword.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Lync Recording Manager.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ocpubmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Office 2013 Language Preferences.lnk -> C:\Program Files\Microsoft Office 15\root\office15\SETLANG.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Office 2013 Upload Center.lnk -> C:\Program Files\Microsoft Office 15\root\office15\msouc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Telemetry Dashboard for Office 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\msotd.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Telemetry Log for Office 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\msoev.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\End User License Agreement.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\Doc\en\license.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security Help.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\Doc\en-US\kis\context.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe (Kaspersky Lab ZAO)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Visit Kaspersky Lab on the Web.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kl.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\About iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.Resources\en.lproj\About iTunes.rtf ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Documentation.lnk -> C:\Program Files (x86)\Hewlett-Packard\Documentation\NotebookDocs.exe (Hewlett-Packard)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Support Assistant.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (Hewlett-Packard Company)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Manager.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Update.lnk -> C:\Program Files (x86)\Hp\HP Software Update\hpwucli.exe (Hewlett-Packard)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Photo Creations\HP Photo Creations.lnk -> C:\Program Files (x86)\HP Photo Creations\PhotoProduct.exe (Visan / RocketLife)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Photo Creations\Uninstall HP Photo Creations.lnk -> C:\Program Files (x86)\HP Photo Creations\uninst.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\Dragon NaturallySpeaking 12.0.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\NatSpeak_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\Dragon NaturallySpeaking Tools\Gather files for support.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\SuppPack_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\Dragon NaturallySpeaking Tools\Upgrade User Profiles.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\Upgrade_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe (CyberLink Corp.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat\Pinger.lnk -> C:\Program Files (x86)\Pinger\Pinger.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\AOL Desktop 9.6.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\AOL System Information.lnk -> C:\Program Files (x86)\Common Files\AOL\System Information\sinf.exe (AOL Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Check for Updates.lnk -> C:\Program Files (x86)\Common Files\AOL\1416183200\ee\SUUILauncher.exe (AOL Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Uninstall.lnk -> C:\Program Files (x86)\Common Files\AOL\uninstaller.exe (AOL Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\AMD Catalyst Control Center.lnk -> C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Hewlett-Packard\Recovery\Links\RM.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.)

Shortcut: C:\Users\Altieri\Links\alti5346_13i_0.lnk -> C:\Users\Altieri\Documents\alti5346_13i_0 ()

Shortcut: C:\Users\Altieri\Links\Desktop.lnk -> C:\Users\Altieri\Desktop ()

Shortcut: C:\Users\Altieri\Links\Downloads.lnk -> C:\Users\Altieri\Downloads ()

Shortcut: C:\Users\Altieri\Links\SkyDrive.lnk -> C:\Program Files (x86)\Microsoft SkyDrive\SkyDriveSetup.exe (No File)

Shortcut: C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (1) - Shortcut.lnk -> C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (1).exe (No File)

Shortcut: C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (3) - Shortcut.lnk -> C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (3).exe (AOL LLC.)

Shortcut: C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (4).exe - Shortcut.lnk -> C:\Users\Joseph\Downloads\AOL_Desktop_9.7 (4).exe (No File)

Shortcut: C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (5) - Shortcut.lnk -> C:\Users\Altieri\Downloads\AOL_Desktop_9.7 (5).exe (No File)

Shortcut: C:\Users\Altieri\Documents\Youcam\CyberLink YouCam(Webcam).lnk -> C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe (CyberLink Corp.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Adobe Reader XI.lnk -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\AOL Desktop 9.7.lnk -> C:\Program Files (x86)\AOL Desktop 9.7\aol.exe (AOL Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Connected Photo.lnk -> C:\SYSTEM.SAV\Util\HPCPDesktopIcon.exe ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Dragon NaturallySpeaking 12.0.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\NatSpeakD_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Evernote.lnk -> C:\Program Files (x86)\Evernote\Evernote\Evernote.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\HP Photo Creations.lnk -> C:\Program Files (x86)\HP Photo Creations\PhotoProduct.exe (Visan / RocketLife)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\HP Quick Access to Miracast.lnk -> C:\Program Files\Hewlett-Packard\HP Quick Access to Miracast\HP Quick Access to Miracast.exe ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Joseph - Shortcut.lnk -> C:\Users\Altieri\Desktop\JOE ALTIERI\Users\Joseph (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Pinger.lnk -> C:\Program Files (x86)\Pinger\Pinger.exe ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Shop for Supplies - HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Skype (2).lnk -> C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\Skype.lnk -> C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Adobe Reader XI.lnk -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\AOL Desktop 9.7.lnk -> C:\Program Files (x86)\AOL Desktop 9.7\aol.exe (AOL Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\CyberLink BD Advisor.lnk -> C:\Program Files (x86)\CyberLink\Advisor\BD_Advisor.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Disney Infinity Toy Box.lnk -> C:\Program Files (x86)\Disney Interactive\Disney Infinity Toy Box\DisneyInfinity.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Driver Support.lnk -> C:\Program Files (x86)\Driver Support\Driver Support\DriverSupport.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\HP Connected Music.lnk -> C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\HP Photo Creations.lnk -> C:\Program Files (x86)\HP Photo Creations\PhotoProduct.exe (Visan / RocketLife)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Intel® WiDi.lnk -> C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Norton Internet Security.lnk -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.4.0.13\uiStub.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\QuickTime Player.lnk -> C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Shop for Supplies - HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Continue Flv Player Installation.lnk -> C:\Users\Altieri\AppData\Local\Temp\ICReinstall_FlvPlayerSetup.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\LG Burning Tool.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\MediaWidget.lnk -> C:\Program Files (x86)\Media Widget\MediaWidget.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Norton Installation Files.lnk -> C:\Users\Public\Downloads\Norton\{NIS214013-SHPD-FSD40014} (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Restored Files.lnk -> C:\Restored Files (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Sync Folder.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Altieri\Documents ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Altieri\Pictures ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage\Configure.lnk -> C:\Users\Altieri\AppData\Roaming\VOPackage\VOPackage.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk -> C:\Users\Altieri\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts.lnk -> C:\Users\Altieri\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts\Severe Weather Alerts.lnk -> C:\Users\Altieri\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton\Norton Installation Files.lnk -> C:\Users\Public\Downloads\Norton\{NIS_prod_1.6.18_18.6.0.29} (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\Uninstall.lnk -> C:\Program Files (x86)\MyPC Backup\uninst.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\LG Burning Tool.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Power2Go Online Help.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Language\Enu\Power2Go.chm (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Power2Go.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2Go.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Readme.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Language\Enu\Readme.htm (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files (x86)\7-Zip\7zFM.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files (x86)\7-Zip\7-zip.chm (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7-Zip\Uninstall.lnk -> C:\Program Files (x86)\7-Zip\Uninstall.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AOL Desktop 9.7.lnk -> C:\Program Files (x86)\AOL Desktop 9.7\aol.exe (AOL Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AOL Software.lnk -> C:\Program Files (x86)\AOL Desktop 9.7\waol.exe (AOL Inc.)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\HP Utility Center.lnk -> C:\Program Files\Hewlett-Packard\HP Utility Center\HPPU.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Desktop\LG Burning Tool.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Altieri\Documents ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Altieri\Pictures ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\LG Burning Tool.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Power2Go Online Help.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Language\Enu\Power2Go.chm (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Power2Go.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Power2Go.exe (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite\LG Burning Tool\Readme.lnk -> C:\Program Files (x86)\CyberLink\Power2Go\Language\Enu\Readme.htm (No File)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Altieri\Documents ()

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Altieri\Pictures ()

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (2).lnk -> C:\Users\Altieri\AppData\Local\LogMeIn Rescue Applet\LMIR0001.tmp\lmi_rescue.exe (No File)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (3).lnk -> C:\Users\Altieri\AppData\Local\LogMeIn Rescue Applet\LMIR0001.tmp\lmi_rescue.exe (No File)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote (4).lnk -> C:\Users\Altieri\AppData\Local\LogMeIn Rescue Applet\LMIR0001.tmp\lmi_rescue.exe (No File)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Remote.lnk -> C:\Users\Altieri\AppData\Local\LogMeIn Rescue Applet\LMIR0001.tmp\lmi_rescue.exe (No File)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support\Driver Support.lnk -> C:\Program Files (x86)\Driver Support\DriverSupport.exe (PC Drivers Headquarters)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support\Uninstall Driver Support.lnk -> C:\Program Files (x86)\Driver Support\Uninstall.exe (PC Drivers HeadQuarters LP)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth File Transfer.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AOL Desktop 9.6.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CyberLink Media Suite.lnk -> C:\Program Files (x86)\CyberLink\Media Suite\PS.exe (CyberLink Corp.)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe (CyberLink Corp.)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\HP Utility Center.lnk -> C:\Program Files\Hewlett-Packard\HP Utility Center\HPUC.exe (Hewlett-Packard Development Company, L.P.)

Shortcut: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\ConnectedSearch\History\set_3456569634_en-us.lnk -> C:\Users\Altieri\Desktop\JOE ALTIERI\Users\Joseph\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Indexed\Settings\en-US\Classic_{231A4A2D-E36A-46CD-84E6-F38551540242}.settingcontent-ms (No File)

Shortcut: C:\Users\Altieri\AppData\Local\Microsoft\Windows\ConnectedSearch\History\set_495550444_en-us.lnk -> C:\Users\Altieri\Desktop\JOE ALTIERI\Users\Joseph\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Indexed\Settings\en-US\Classic_{EDB046FF-3554-4BD0-B152-DE4DF7071CA8}.settingcontent-ms (No File)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Altieri\Documents ()

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Altieri\Pictures ()

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Public\Desktop\AOL Desktop 9.6.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.)

Shortcut: C:\Users\Public\Desktop\iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)

Shortcut: C:\Users\Public\Desktop\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe (Kaspersky Lab ZAO)

Shortcut: C:\Users\Public\Desktop\Skype.lnk -> C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe ()

Shortcut: C:\Users\Public\Desktop\TouchCopy 12.lnk -> C:\Windows\Installer\{EB775F20-F363-4A01-8A89-3C89AE1E373D}\_8ACDACD7932DF74D55EEDD.exe ()}

_{ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos\Snapfish.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2014_us

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\Snapfish.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2014_us

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\Snapfish.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Search.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://feed.snapdo.com/?publisher=SnapdoTT&dpid=SnapdoTT&co=US&userid=a147f418-a7a9-0f67-9bc3-ed2db720eff7&searchtype=sc&installDate=25/07/2014&barcodeid=144083&um=0

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.istart123.com/?type=sc&ts=1406075724&from=tugs&uid=HGSTXHTS541075A9E680_JA1100A1G9YDLPG9YDLPX

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://feed.snapdo.com/?publisher=SnapdoTT&dpid=SnapdoTT&co=US&userid=a147f418-a7a9-0f67-9bc3-ed2db720eff7&searchtype=sc&installDate=25/07/2014&barcodeid=144083&um=0

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.istart123.com/?type=sc&ts=1406075724&from=tugs&uid=HGSTXHTS541075A9E680_JA1100A1G9YDLPG9YDLPX

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://feed.snapdo.com/?publisher=SnapdoTT&dpid=SnapdoTT&co=US&userid=a147f418-a7a9-0f67-9bc3-ed2db720eff7&searchtype=sc&installDate=25/07/2014&barcodeid=144083&um=0

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AmazonShopping.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.amazon.com/gp/bit/amazonbookmark.html?tag=hp2-desktop-us-20&partner=HP}

_{ShortcutWithArgument: C:\ProgramData\Pokki\PC App Store.lnk -> C:\Users\Altieri\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki) -> /OPEN"f22abfeae27a67446927d078890381efc546d3e1"

ShortcutWithArgument: C:\ProgramData\Pokki\Start Menu.lnk -> C:\Users\Altieri\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki) -> /OPEN"menu"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> -sta {C90FB8CA-3295-4462-A721-2935E83694BA}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - hp.lnk -> C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe (WildTangent) -> /src gamesmenu /dp hpcnb2c14

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\InfoPath Designer 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\infopath.exe (Microsoft Corporation) -> /design

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Database Compare 2013.lnk -> C:\Program Files\Microsoft Office 15\root\client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files\Microsoft Office 15\Root\Office15\DCF\DATABASECOMPARE.EXE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools\Spreadsheet Compare 2013.lnk -> C:\Program Files\Microsoft Office 15\root\client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files\Microsoft Office 15\Root\Office15\DCF\SPREADSHEETCOMPARE.EXE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Remove Kaspersky Internet Security.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{8ED07EBD-22AD-415A-B71E-C1AD86862C2E} REMOVE=ALL

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab about

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\javacpl.exe (Oracle Corporation) -> -tab update

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Media Creation.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.) -> \CRM

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Photosmart 7520 series\HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\HP Photosmart 7520 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\All Casual Games.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=000d96f5-8034-4b74-a429-b6f0b04c75f4 /src gamesmenuoem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\All Enthusiast Games.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=26352374-af55-4b53-b07b-6b0288ed97df /src gamesmenuoem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\All Family Games.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=d58eecb0-0816-11de-8c30-0800200c9a66 /src gamesmenuoem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\All Kids Games.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=3eda1e54-8889-41f5-a649-5a306789b7ef /src gamesmenuoem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Bejeweled 3.lnk -> C:\Program Files (x86)\WildGames\Bejeweled 3\bejeweled3-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Build-a-lot Mysteries.lnk -> C:\Program Files (x86)\WildGames\Build-a-lot Mysteries\Buildalot8-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Farm Frenzy.lnk -> C:\Program Files (x86)\WildGames\Farm Frenzy\Farm Frenzy-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Fort Defense.lnk -> C:\Program Files (x86)\WildGames\Fort Defense\FortDefense-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Lost in Reefs 2.lnk -> C:\Program Files (x86)\WildGames\Lost in Reefs 2\LostInReefs2-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\More Games from WildTangent Games.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - main\provider.exe (WildTangent) -> /id=977b5905-4d14-47f1-bbbf-7b92f596695d /src gamesmenuoem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Plants vs. Zombies - Game of the Year.lnk -> C:\Program Files (x86)\WildGames\Plants vs Zombies - Game of the Year\plantsvszombies-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Solitaire Mystery Four Seasons.lnk -> C:\Program Files (x86)\WildGames\Solitaire Mystery Four Seasons\Solitaire_Mystery_Four_Seasons-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Vacation Quest™ - Australia.lnk -> C:\Program Files (x86)\WildGames\Vacation Quest - Australia\vacationquestaustralia-WT.exe (WildTangent, Inc.) -> /launchgc /src gamesmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\WildTangent Games App - hp.lnk -> C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe (WildTangent) -> /src gamesmenu /dp hpcnb2c14

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\About Dragon NaturallySpeaking 12.0.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\About_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.) -> /About

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\Show Dragon Log.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\Dragonlog_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.) -> /finddragonlog

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0\Show Setup Log.lnk -> C:\Windows\Installer\{D5D422B9-6976-4E98-8DDF-9632CB515D7E}\Setuplog_Shortcut_D5D422B969764E988DDF9632CB515D7E.exe (Acresso Software Inc.) -> /findsetuplog

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\AOL Search.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SAOLSearch

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\My AOL.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SMyAOL

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Radio @ AOL.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SAOLRadio

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Read Mail.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SMailbox

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Send Instant Message.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SIM

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL\Sign on to AOL Now.lnk -> C:\Program Files (x86)\AOL Desktop 9.6\aol.exe (AOL Inc.) -> /SWelcome

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{ff96d0d3-8479-455a-8653-ccfb7557ef03}\PlayTasks\0\Lost in Reefs 2.lnk -> C:\Program Files (x86)\WildGames\Lost in Reefs 2\LostInReefs2-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{f814bd54-ed1e-44c5-95f2-5a7ea56b0a89}\PlayTasks\0\Build-a-lot Mysteries.lnk -> C:\Program Files (x86)\WildGames\Build-a-lot Mysteries\Buildalot8-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{f405496e-4cd5-4891-a8bc-3e58bd47b25c}\PlayTasks\0\Penguins!.lnk -> C:\Program Files (x86)\WildGames\Penguins!\Penguins-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{f244afb6-a31c-4254-82f2-e89a2cfa9c24}\PlayTasks\0\LUXOR Evolved.lnk -> C:\Program Files (x86)\WildGames\LUXOR Evolved\luxor_ev_x86-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{f10f89f1-9c08-4d85-9169-a28ba1fc6ab0}\PlayTasks\0\Farm Frenzy.lnk -> C:\Program Files (x86)\WildGames\Farm Frenzy\Farm Frenzy-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{e7670ec4-0132-4d49-b460-96cc37855a0b}\PlayTasks\0\King Oddball.lnk -> C:\Program Files (x86)\WildGames\King Oddball\KingOddball-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{d58eecb0-0816-11de-8c30-0800200c9a66}\PlayTasks\0\provider.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=d58eecb0-0816-11de-8c30-0800200c9a66 /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{ca9f0082-7f3d-4f78-b4e6-592c73461b8c}\PlayTasks\0\Tales of Lagoona.lnk -> C:\Program Files (x86)\WildGames\Tales of Lagoona\Tales of Lagoona-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{c964efd3-4186-496b-962e-17e615a40b3f}\PlayTasks\0\Fort Defense.lnk -> C:\Program Files (x86)\WildGames\Fort Defense\FortDefense-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{b87f2bde-5d44-4e86-bd37-a71616b35ea6}\PlayTasks\0\Bejeweled 3.lnk -> C:\Program Files (x86)\WildGames\Bejeweled 3\bejeweled3-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{b599855c-211e-4e88-8354-304d0244cd1f}\PlayTasks\0\Plants vs. Zombies - Game of the Year.lnk -> C:\Program Files (x86)\WildGames\Plants vs Zombies - Game of the Year\plantsvszombies-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{b454ec2c-0515-4fac-bc37-062fd057b325}\PlayTasks\0\Solitaire Mystery Four Seasons.lnk -> C:\Program Files (x86)\WildGames\Solitaire Mystery Four Seasons\Solitaire_Mystery_Four_Seasons-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{b0e43195-dbe0-4647-8e23-84fc3b08cee9}\PlayTasks\0\web.lnk -> C:\Program Files (x86)\WildTangent Games\Web Link - Dragons Of Atlantis\launcher.exe (WildTangent) -> /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{a853c280-0805-4be2-b73d-22e5679b3024}\PlayTasks\0\Youda Jewel Shop.lnk -> C:\Program Files (x86)\WildGames\Youda Jewel Shop\YoudaJewelShop-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{a6952178-4ef2-4a82-9850-505e08a30851}\PlayTasks\0\Barn Yarn Collector's Edition.lnk -> C:\Program Files (x86)\WildGames\Barn Yarn Collectors Edition\Barn Yarn-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{a1f98229-fe5c-450f-9862-daa39159114d}\PlayTasks\0\Vacation Quest™ - Australia.lnk -> C:\Program Files (x86)\WildGames\Vacation Quest - Australia\vacationquestaustralia-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{977b5905-4d14-47f1-bbbf-7b92f596695d}\PlayTasks\0\provider.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - main\provider.exe (WildTangent) -> /id=977b5905-4d14-47f1-bbbf-7b92f596695d /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{83313d92-23c5-42b6-8f25-1a8ae8b62170}\PlayTasks\0\Viking Saga.lnk -> C:\Program Files (x86)\WildGames\Viking Saga\VikingSaga-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{7e008ca2-08ab-4789-af23-36da87658f74}\PlayTasks\0\web.lnk -> C:\Program Files (x86)\WildTangent Games\Web Link - DoubleDown Casino\launcher.exe (WildTangent) -> /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{74e6d22f-cb18-4829-9d0a-ed768ab6d91e}\PlayTasks\0\Peggle Nights.lnk -> C:\Program Files (x86)\WildGames\Peggle Nights\pegglenights-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{71ac3487-bd1f-49c7-87ae-9c4beffe199e}\PlayTasks\0\Joining Hands 2.lnk -> C:\Program Files (x86)\WildGames\Joining Hands 2\JoiningHands2-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{68aed4ed-5ad5-4e61-ac8a-0241e603b5a9}\PlayTasks\0\Building the Great Wall of China Collector's Edition.lnk -> C:\Program Files (x86)\WildGames\Building the Great Wall of China Collectors Edition\Building the Great Wall of China CE-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{612efb50-a12a-41ee-8d9d-cefc047e88df}\PlayTasks\0\Curse at Twilight.lnk -> C:\Program Files (x86)\WildGames\Curse at Twilight\CurseAtTwilightEE-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{5b8995f5-f888-4f17-a15a-d9b40458d4d9}\PlayTasks\0\Azkend 2 The World Beneath.lnk -> C:\Program Files (x86)\WildGames\Azkend 2 The World Beneath\Azkend2-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{4ab17087-5348-4a14-8af5-cd43a0707d5f}\PlayTasks\0\Polar Bowler 1st Frame.lnk -> C:\Program Files (x86)\WildGames\Polar Bowler 1st Frame\PBFF_PC-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{471351f0-4e8a-47bf-a6b3-3de3c99ae340}\PlayTasks\0\Jewel Match 3.lnk -> C:\Program Files (x86)\WildGames\Jewel Match 3\jewelmatch3-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{3eda1e54-8889-41f5-a649-5a306789b7ef}\PlayTasks\0\provider.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=3eda1e54-8889-41f5-a649-5a306789b7ef /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{33f508f4-fbd6-4035-9f5c-28a016b5a8e9}\PlayTasks\0\4 Elements II.lnk -> C:\Program Files (x86)\WildGames\4 Elements II\4 Elements-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{2D080D0F-37EF-433E-90F1-CE36EB0205F6}\PlayTasks\0\web.lnk -> C:\Program Files (x86)\WildTangent Games\Web Link - Seafight\launcher.exe (WildTangent) -> /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{26352374-af55-4b53-b07b-6b0288ed97df}\PlayTasks\0\provider.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=26352374-af55-4b53-b07b-6b0288ed97df /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{22b727b9-65f6-43ed-b0a3-c7a0e502fedd}\PlayTasks\0\Mystery P.I. - Curious Case of Counterfeit Cove.lnk -> C:\Program Files (x86)\WildGames\Mystery PI - Curious Case of Counterfeit Cove\MysteryPINewEngland-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{227680FF-28CE-48EE-AADF-8D009B2813A9}\PlayTasks\0\web.lnk -> C:\Program Files (x86)\WildTangent Games\Web Link - Dark Orbit\launcher.exe (WildTangent) -> /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{1d2aba81-1231-420a-8cdc-2ff99235b2de}\PlayTasks\0\Roads of Rome 3.lnk -> C:\Program Files (x86)\WildGames\Roads of Rome 3\RoadsOfRome3-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{18d2be3f-8629-4196-8a82-1626487c3373}\PlayTasks\0\Fishdom 3 Collector's Edition.lnk -> C:\Program Files (x86)\WildGames\Fishdom 3 Collectors Edition\Fishdom 3-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{11df15ff-f066-4c33-ac85-8738689543f5}\PlayTasks\0\Governor of Poker 2 Premium Edition.lnk -> C:\Program Files (x86)\WildGames\Governor of Poker 2 Premium Edition\GovernorofPoker2_PE_WildTangent_v1.5-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{10e0d897-d0af-4bd9-8955-ca2faaf03419}\PlayTasks\0\Sparkle 2.lnk -> C:\Program Files (x86)\WildGames\Sparkle 2\Sparkle2-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{040bbc8d-6227-4ad3-a85e-6b7ae1176715}\PlayTasks\0\Delicious - Emily's Wonder Wedding Premium Edition.lnk -> C:\Program Files (x86)\WildGames\Delicious - Emilys Wonder Wedding Premium Edition\DeliciousEmilysWonderWeddingPremium-WT.exe (WildTangent, Inc.) -> /launchgc /src gameexplorer

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\GameExplorer\{000d96f5-8034-4b74-a429-b6f0b04c75f4}\PlayTasks\0\provider.lnk -> C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\provider.exe (WildTangent) -> /id=000d96f5-8034-4b74-a429-b6f0b04c75f4 /src gameexploreroem

ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\Recovery\Links\Apps.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.) -> \SWR

ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\Recovery\Links\BTR.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.) -> \BTR

ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\Recovery\Links\Driver.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.) -> \SWR

ShortcutWithArgument: C:\ProgramData\Hewlett-Packard\Recovery\Links\RMC.lnk -> C:\Program Files (x86)\Hewlett-Packard\HP Recovery Manager\rebecca.exe (Hewlett-Packard Development Company, L.P.) -> \CRM

ShortcutWithArgument: C:\Users\Altieri\Desktop\HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\HP Photosmart 7520 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\Connected Drive.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> C:\system.sav\util\HPCDDesktopIcon.exe

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\Connected Music.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> C:\system.sav\util\HPCM\HPCMDesktopIcon.exe

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\HP Photosmart 7520 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\WildTangent Games App - hp.lnk -> C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe (WildTangent) -> /src desktop /dp hpcnb2c14

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\HP Games.lnk -> C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe (WildTangent) -> /src desktopoem /dp hpcnb2c13

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Public\Desktop\HP Photosmart 7520 series.lnk -> C:\Program Files\HP\HP Photosmart 7520 series\Bin\HP Photosmart 7520 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation) -> /tsr

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk -> C:\Users\Altieri\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki) -> /OPEN"f22abfeae27a67446927d078890381efc546d3e1"

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk -> C:\Users\Altieri\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki) -> /OPEN"menu"

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Connected Drive.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> C:\system.sav\util\HPCDDesktopIcon.exe

ShortcutWithArgument: C:\Users\Altieri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Menu.lnk -> C:\Users\Altieri\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki) -> /OPEN"menu"

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Altieri\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}}

_{InternetURL: C:\Users\Altieri\Favorites\Bing.url -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255142

InternetURL: C:\Users\Altieri\Favorites\KidZui, The Internet for Kids.url -> hxxp://www.kidzui.com/toshiba

InternetURL: C:\Users\Altieri\Favorites\WildTangent Games\WildTangent Games.url -> hxxp://toshiba.wildgames.com/?mc=iefav&dp=toshibaus

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Deals and Offers.url -> hxxp://us.toshiba.com/adps/deals-and-offers

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Explore Toshiba.url -> hxxp://us.toshiba.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Find Us on Twitter, Facebook, and YouTube.url -> hxxp://us.toshiba.com/social-media

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Shop Toshiba.url -> hxxp://www.toshibadirect.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba App Place.url -> hxxp://apps.toshiba.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Book Place.url -> hxxp://www.toshibabookplace.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Corporate Social Responsibility.url -> hxxp://us.toshiba.com/green

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Laptop Forums.url -> hxxp://laptopforums.toshiba.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Online Backup.url -> hxxp://us.toshiba.com/online-backup

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Product Registration.url -> hxxp://toshibaproductregistration.com/

InternetURL: C:\Users\Altieri\Favorites\Toshiba\Toshiba Support.url -> hxxp://pcsupport.toshiba.com/

InternetURL: C:\Users\Altieri\Favorites\Skype\Skype.url -> hxxp://www.skype.com/go/ToshibaTAIS

InternetURL: C:\Users\Altieri\Favorites\Norton Internet Security\Symantec Security Center.url -> hxxp://www.yoursecurityresource.com/exploretoshiba/home.html

InternetURL: C:\Users\Altieri\Favorites\Links for United States\GobiernoUSA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129792

InternetURL: C:\Users\Altieri\Favorites\Links for United States\USA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129791

InternetURL: C:\Users\Altieri\Favorites\Links\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\Altieri\Favorites\Links\HP - See What's Hot (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&s=webslice&tp=iefavbar&pf=cnnb&locale=en_us&bd=HP&c=124

InternetURL: C:\Users\Altieri\Favorites\Links\HP - See What's Hot.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&s=webslice&tp=iefavbar&pf=cnnb&locale=en_us&bd=HP&c=133

InternetURL: C:\Users\Altieri\Favorites\Links\HP Games (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&s=myhpgames&tp=iefavbar&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\Links\Microsoft Windows Support.url -> hxxp://www.fix100.com/8962561/red/microsoft-windows-support.html

InternetURL: C:\Users\Altieri\Favorites\Links\My eBay.url -> hxxp://my.ebay.com/ws/eBayISAPI.dll?MyEbay&gbh=1

InternetURL: C:\Users\Altieri\Favorites\Links\Stay Secure Online.url -> hxxp://www.yoursecurityresource.com/exploretoshiba/home.html#LatestFeature

InternetURL: C:\Users\Altieri\Favorites\Links\Suggested Sites.url -> https://ieonline.mic...ft.com/#ieslice

InternetURL: C:\Users\Altieri\Favorites\Links\testimonials.url -> hxxp://www.platoscloset.com/own-a-platos-closet/testimonials/

InternetURL: C:\Users\Altieri\Favorites\Links\This page can’t be displayed.url -> https://mail.aol.com...tDir=descending

InternetURL: C:\Users\Altieri\Favorites\Links\w4rmh.,mfbdv gjc W0=-8ESRY=[ - Bing.url -> hxxp://www.bing.com/search?q=w4rmh.%2Cmfbdv%20gjc%20W0%3D-8ESRY%3D%5B%5C&pc=conduit&ptag=AEA2A71A23E0B40AB94F&form=CONBDF&conlogo=CT3210127

InternetURL: C:\Users\Altieri\Favorites\Links\Web Slice Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\Users\Altieri\Favorites\Links\WildTangent Games.url -> hxxp://toshiba.wildgames.com/#ie8WebSlice

InternetURL: C:\Users\Altieri\Favorites\Links\winx Bloomix Battle Play Kids Games Nick Games (2).url -> hxxp://www.nick.com/games/winx-bloomix-battle.html

InternetURL: C:\Users\Altieri\Favorites\Links\winx Bloomix Battle Play Kids Games Nick Games (3).url -> hxxp://www.nick.com/games/winx-bloomix-battle.html

InternetURL: C:\Users\Altieri\Favorites\Links\winx Bloomix Battle Play Kids Games Nick Games.url -> hxxp://www.nick.com/games/winx-bloomix-battle.html

InternetURL: C:\Users\Altieri\Favorites\HP\Accessories (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpaccessories&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpaccessories&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\Altieri\Favorites\HP\BEST BUY (2).url -> hxxp://www.bestbuy.com/

InternetURL: C:\Users\Altieri\Favorites\HP\Best Buy.url -> hxxp://www.bestbuy.com/

InternetURL: C:\Users\Altieri\Favorites\HP\eBay (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=ebay&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\eBay.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=ebay&pf=cnnb&locale=en_us&bd=all&c=131

InternetURL: C:\Users\Altieri\Favorites\HP\HP Creative Studio (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=activitycenter&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=activitycenter&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\HP Games (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en_US&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\HP Games.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\HP Smart Friend.url -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=134&locale=en_us&pf=cnnb&s=sf_volume_ie_nb&tp=iefavs

InternetURL: C:\Users\Altieri\Favorites\HP\HP Store (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpstore&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpstore&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\Printing (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=printing&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=printing&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\Saving Center (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=savingscenter&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\Saving Center.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=savingscenter&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\Snapfish (2).url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2012_us

InternetURL: C:\Users\Altieri\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us

InternetURL: C:\Users\Altieri\Favorites\HP\Software and Driver Downloads (2).url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=downloads&pf=cnnb&locale=en_us&bd=all&c=124

InternetURL: C:\Users\Altieri\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=downloads&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Favorites\HP\Try HP MyRoom Free (2).url -> hxxp://redirect.hp.com/svs/rdr?bd=all&tp=iefavs&locale=en_ww&pf=cnnb&c=124&s=hp_myroom&TYPE=4

InternetURL: C:\Users\Altieri\Favorites\HP\Try HP MyRoom Free.url -> hxxp://redirect.hp.com/svs/rdr?bd=all&tp=iefavs&locale=en_ww&pf=cnnb&c=132&s=hp_myroom&TYPE=4

InternetURL: C:\Users\Altieri\Favorites\HP\WildTangent Games for HP.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en-us&bd=all&c=143

InternetURL: C:\Users\Altieri\Favorites\eMusic\eMusic.url -> hxxp://www.emusic.com/Toshiba

InternetURL: C:\Users\Altieri\Favorites\Amazon.com\Amazon MP3 – Millions of Music Downloads.url -> hxxp://www.amazon.com/b/?node=163856011&tag=tais2-bookmark-mp3-20

InternetURL: C:\Users\Altieri\Favorites\Amazon.com\Amazon Video On Demand Movies & TV.url -> hxxp://www.amazon.com/b/?node=16261631&tag=tais2-bookmark-vod-20

InternetURL: C:\Users\Altieri\Favorites\Amazon.com\Shop at Amazon.com.url -> hxxp://www.amazon.com/?tag=tais2-desktop-20

InternetURL: C:\Users\Altieri\Desktop\Accounts - Citibank.url -> https://online.citib.../portal/Home.do

InternetURL: C:\Users\Altieri\Desktop\Electronics, Cars, Fashion, Collectibles, Coupons and More eBay.url -> hxxp://www.ebay.com/

InternetURL: C:\Users\Altieri\Desktop\Google.url -> https://www.google.com/?gws_rd=ssl

InternetURL: C:\Users\Altieri\Desktop\How to enable or disable notifications of vulnerabilities in Wi-Fi networks in Kaspersky Internet Security 2015.url -> hxxp://support.kaspersky.com/us/10965?cid=KIS_15.0#home

InternetURL: C:\Users\Altieri\Desktop\Pandora Radio - Listen to Free Internet Radio, Find New Music.url -> hxxp://www.pandora.com/account/sign-in

InternetURL: C:\Users\Altieri\Desktop\Profitmastery-university.url -> hxxp://pmu.aptility.net/Portal/Pages/Welcome.aspx

InternetURL: C:\Users\Altieri\Desktop\Small Business Information, Resources and Tools - Winmark Business Solutions.url -> hxxp://www.wbsonline.com/

InternetURL: C:\Users\Altieri\Desktop\Welcome.url -> hxxp://pmu.aptility.net/Portal/Pages/Welcome.aspx

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Accounts - Citibank.url -> https://online.citib.../portal/Home.do

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Apple - How to Contact Us.url -> hxxp://www.apple.com/contact/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\CreditCheck® Total.url -> https://www.creditch...stnum=326845269

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Electronics, Cars, Fashion, Collectibles, Coupons and More eBay.url -> hxxp://www.ebay.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Google.url -> https://www.google.com/?gws_rd=ssl

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\HP Printer Diagnostic Tools.url -> hxxp://h20180.www2.hp.com/apps/Nav?h_pagetype=s-926&h_lang=en&h_client=s-h-e016-1&h_keyword=dg-THD&jumpid=ex_r4155/hho/ipg/ccdoc/trailhead_doc

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\HSBC.url -> https://www.us.hsbc....nance/term-loan

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\iCloud.url -> https://www.icloud.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\iTunes Using the iTunes Store for iPhone, iPad, and iPod touch - Apple Support.url -> hxxp://support.apple.com/en-us/HT201574

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\K-CUP Quick Order.url -> hxxp://www.thecoffeemix.com/K-CUP_Quick_Order.html

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Microsoft Word Online - Work together on Word documents.url -> https://office.live....n-US&s=1&ppud=4

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Pandora Radio - Listen to Free Internet Radio, Find New Music.url -> hxxp://www.pandora.com/account/sign-in

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Search Federal Trade Commission.url -> hxxp://www.ftc.gov/search/site/buying%20a%20Franchise

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Sign On - Citibank® online.url -> https://online.citib...portal/Index.do

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Small Business Information, Resources and Tools - Winmark Business Solutions.url -> hxxp://www.wbsonline.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\TD Ameritrade clients get a special discount on our home equity line of credit. TD Bank.url -> hxxp://www.tdbank.com/tdaspecialrate1/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\UN Webmail.url -> https://webmail.un.org/mailjump.nsf

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\Welcome.url -> hxxp://pmu.aptility.net/Portal/Pages/Welcome.aspx

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Electronics, Cars, Fashion, Collectibles, Coupons and More Online Shopping eBay.url -> hxxp://www.ebay.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Find My iPhone on the App Store on iTunes.url -> https://itunes.apple...d376101648?mt=8

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Google.url -> https://www.google.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\My ipod wont sync Apple Support Communities.url -> https://discussions....436216#21436216

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Welcome to EFTPS online (2).url -> https://www.eftps.gov/eftps/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Joseph\Desktop\Welcome to EFTPS online.url -> https://www.eftps.go.../EftpsHome.page

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpaccessories&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Best Buy.url -> hxxp://www.bestbuy.com/

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\eBay.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=ebay&pf=cnnb&locale=en_us&bd=all&c=131

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=activitycenter&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\HP Games.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpstore&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=printing&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Saving Center.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=savingscenter&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2013_us

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=downloads&pf=cnnb&locale=en_us&bd=all&c=133

InternetURL: C:\Users\Altieri\Desktop\Desktop Items\JOE ALTIERI\Users\Default\Favorites\HP\Try HP MyRoom Free.url -> hxxp://redirect.hp.com/svs/rdr?bd=all&tp=iefavs&locale=en_ww&pf=cnnb&c=132&s=hp_myroom&TYPE=4

InternetURL: C:\Users\Altieri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeParlor\Play ArcadeParlor Online.url -> hxxp://www.arcadeparlor.com/

InternetURL: C:\Users\Default\Favorites\Links\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\Default\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpaccessories&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\Default\Favorites\HP\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\Default\Favorites\HP\Best Buy.url -> hxxp://www.bestbuy.com/

InternetURL: C:\Users\Default\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=activitycenter&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\Default\Favorites\HP\HP Smart Friend.url -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=134&locale=en_us&pf=cnnb&s=sf_volume_ie_nb&tp=iefavs

InternetURL: C:\Users\Default\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpstore&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\Default\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=printing&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\Default\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2014_us

InternetURL: C:\Users\Default\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=downloads&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\Default\Favorites\HP\WildTangent Games for HP.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en-us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\Bing.url -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255142

InternetURL: C:\Users\jalt6_000\Favorites\Links\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\jalt6_000\Favorites\HP\Accessories.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpaccessories&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\HP\Amazon.com – Online Shopping.url -> hxxp://redirect.hp.com/svs/rdr?locale=en_us&c=142&bd=pavilion&tp=iefavbar&s=amazon&pf=cnnb&TYPE=4

InternetURL: C:\Users\jalt6_000\Favorites\HP\Best Buy.url -> hxxp://www.bestbuy.com/

InternetURL: C:\Users\jalt6_000\Favorites\HP\HP Creative Studio.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=activitycenter&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\HP\HP Smart Friend.url -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=134&locale=en_us&pf=cnnb&s=sf_volume_ie_nb&tp=iefavs

InternetURL: C:\Users\jalt6_000\Favorites\HP\HP Store.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=hpstore&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\HP\Printing.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=printing&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\HP\Snapfish.url -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2014_us

InternetURL: C:\Users\jalt6_000\Favorites\HP\Software and Driver Downloads.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=downloads&pf=cnnb&locale=en_us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Favorites\HP\WildTangent Games for HP.url -> hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cnnb&locale=en-us&bd=all&c=143

InternetURL: C:\Users\jalt6_000\Desktop\Google.url -> https://www.google.com/?gws_rd=ssl

InternetURL: C:\Users\jalt6_000\Desktop\Sign On - Citibank.url -> https://online.citib...portal/Index.do}

_{==================== End of log =============================}

#11
ruggie_uk

Posted 12 January 2015 - 03:43 AM

Trusted Helper

Malware Removal
2,083 posts

Hi, thanks for the logs - lets get you cleaned up

Step 1

FRST Fix

If FRST.exe/FRST64.exe is not on your desktop, please download Farbar Recovery Scan Tool and save it to your desktop.

Download the attached fixlist.txt 6.7KB 201 downloads and save it to your desktop <<< very important - it must be in the same location as FRST.exe/FRST64.exe
Right click and run as administrator. When the tool opens click Yes to the disclaimer.
Press the Fix button.
It will produce a log called fixlog.txt on your Desktop.
Please copy and paste the contents of that log back here.

NOTICE: This script was written specifically for this user, for use on that particular machine, at this point in time. Running this on another machine may cause damage to your operating system.

Step 2

Junkware Removal Tool
Please download Junkware Removal Tool to your desktop. << Important
Ensure that any security software is temporarily disabled for the duration of the scan. Don't forget to re-enable it afterwards.

Shut down your protection software now to avoid potential conflicts.
Run the tool by right-clicking and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Step 3

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.

NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
You will see the following console:
Click the Scan button and wait for the scan to finish.
After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove. Please Do Not delete anything at this time.
Click the Report button to get the log.
Copy and Paste it into your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[R0].txt.
Click the X in the upper right corner of the program or click the File menu and click Exit to close the program.

Optional:

NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.

Items I need to see in your next post:

FRST Fixlog
JRT Log
ADWcleaner Scan log
How is your computer behaving now?

#12
Dakeyras

Posted 16 January 2015 - 05:44 AM

Anti-Malware Mammoth

Expert
9,772 posts

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.