Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

I have this virus [Closed]


  • This topic is locked This topic is locked

#1
joy66

joy66

    Member

  • Member
  • PipPip
  • 13 posts

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Attached Files


  • 0

Advertisements


#2
Naathim

Naathim

    GeekU Minion

  • Expert
  • 4,568 posts
Hi Joy66,

Welcome to GeeksTogo :)

Please try to paste those log files in two separate posts, using one for each logfile. It will make my work easier.

Also please do not start multiple threads. That confuses us, helpers. Stick with me in this one.

Thanks :)
  • 0

#3
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 


  • 0

#4
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 


  • 0

#5
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 

"active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               Google Voice Search Hotword (Beta)
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
            "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               YouTube
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Media View",
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
bbkebpmcomommkhjnahadcnheaomnfab\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               "name": "Google Voice Search Hotword (Beta)",
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {


  • 0

#6
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

 

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 

"active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               Google Voice Search Hotword (Beta)
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
            "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               YouTube
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Media View",
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
bbkebpmcomommkhjnahadcnheaomnfab\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               "name": "Google Voice Search Hotword (Beta)",
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {

"onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               "name": "YouTube",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0 No File
CHR Plugin: (Adblock Plus
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
            "path": "cfhdojbkjhnklbpkdaibdccddilifddb\\1.9.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               Google Search
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
            "path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_1") - "name": "Adblock Plus",
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               "name": "Google Search",
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_1 No File
CHR Plugin: (hotword helper
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\37.0.2062.103\\resources\\hotword_helper",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",
               "incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               Bookmark Manager
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\bookmark_manager",
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               Settings
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\settings_app",
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     Bing
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               MSN Homepage & Bing Search Engine
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
            "path": "fcfenmboojpjinhpgggodefccipikbpd\\0.0.0.8_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               PDF to Word Doc Converter
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
            "path": "fjhedcdiaeighcnidfhegnmfieiejmdj\\1.0.2.4_0") - "name": "hotword helper",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\resources\hotword_helper,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",


  • 0

#7
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

 

 

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 

"active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               Google Voice Search Hotword (Beta)
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
            "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               YouTube
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Media View",
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
bbkebpmcomommkhjnahadcnheaomnfab\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               "name": "Google Voice Search Hotword (Beta)",
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {

"onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               "name": "YouTube",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0 No File
CHR Plugin: (Adblock Plus
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
            "path": "cfhdojbkjhnklbpkdaibdccddilifddb\\1.9.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               Google Search
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
            "path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_1") - "name": "Adblock Plus",
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               "name": "Google Search",
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_1 No File
CHR Plugin: (hotword helper
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\37.0.2062.103\\resources\\hotword_helper",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",
               "incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               Bookmark Manager
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\bookmark_manager",
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               Settings
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\settings_app",
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     Bing
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               MSN Homepage & Bing Search Engine
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
            "path": "fcfenmboojpjinhpgggodefccipikbpd\\0.0.0.8_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               PDF to Word Doc Converter
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
            "path": "fjhedcdiaeighcnidfhegnmfieiejmdj\\1.0.2.4_0") - "name": "hotword helper",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\resources\hotword_helper,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",

"incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               "name": "Bookmark Manager",
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\bookmark_manager,
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               "name": "Settings",
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\settings_app,
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     "name": "Bing",
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               "name": "MSN Homepage & Bing Search Engine",
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
fcfenmboojpjinhpgggodefccipikbpd\0.0.0.8_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               "name": "PDF to Word Doc Converter",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
fjhedcdiaeighcnidfhegnmfieiejmdj\1.0.2.4_0 No File
CHR Plugin: (Zoominto
               "permissions": [ "contextMenus" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.5.14"
            },
            "path": "fnkoafephiilajeompiffeohpcloapob\\4.5.14_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "gfdkimpbcpahaombhbimeihdjnejgicl": {
            "active_permissions": {
               "api": [ "feedbackPrivate" ],
               "explicit_host": [ "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "feedbackPrivate.onFeedbackRequested" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852587571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "js/event_handler.js" ]
                  },
                  "content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
               },
               "description": "User feedback extension",
               "display_in_launcher": false,
               "display_in_new_tab_page": false,
               "icons": {
                  "32": "images/icon32.png",
                  "64": "images/icon64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
               "manifest_version": 2,
               Feedback
               "permissions": [ "feedbackPrivate", "chrome://resources/" ],
               "version": "1.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\feedback",
            "running": false,
            "was_installed_by_default": false
         },
         "gighmmpiobklfepjocnamgkkbiglidom": {
            "active_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.autorevue.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.mobilmania.cz/*", "*://*.sportrevue.cz/*", "*://*.youtube.com/*", "*://*.zive.cz/*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "proxy", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "http://*/*", "https://*/*" ]
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085764334542395",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "punycode.min.js", "jquery/jquery.min.js", "port.js", "functions.js", "stats.js", "survey.js", "filtering/domainset.js", "filtering/filteroptions.js", "filtering/filtertypes.js", "filtering/filterset.js", "filtering/myfilters.js", "filtering/filternormalizer.js", "idlehandler.js", "dropbox-datastores.js", "gab_question.js", "background.js", "datacollection.js" ]
               },
               "browser_action": {
                  "default_icon": {
                     "19": "img/icon19.png",
                     "38": "img/icon38.png"
                  },
                  "default_popup": "button/popup.html",
                  "default_title": "AdBlock - click for details"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "js": [ "bandaids.js" ],


  • 0

#8
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

 

 

 

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 

"active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               Google Voice Search Hotword (Beta)
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
            "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               YouTube
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Media View",
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
bbkebpmcomommkhjnahadcnheaomnfab\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               "name": "Google Voice Search Hotword (Beta)",
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {

"onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               "name": "YouTube",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0 No File
CHR Plugin: (Adblock Plus
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
            "path": "cfhdojbkjhnklbpkdaibdccddilifddb\\1.9.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               Google Search
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
            "path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_1") - "name": "Adblock Plus",
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               "name": "Google Search",
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_1 No File
CHR Plugin: (hotword helper
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\37.0.2062.103\\resources\\hotword_helper",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",
               "incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               Bookmark Manager
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\bookmark_manager",
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               Settings
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\settings_app",
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     Bing
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               MSN Homepage & Bing Search Engine
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
            "path": "fcfenmboojpjinhpgggodefccipikbpd\\0.0.0.8_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               PDF to Word Doc Converter
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
            "path": "fjhedcdiaeighcnidfhegnmfieiejmdj\\1.0.2.4_0") - "name": "hotword helper",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\resources\hotword_helper,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",

"incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               "name": "Bookmark Manager",
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\bookmark_manager,
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               "name": "Settings",
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\settings_app,
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     "name": "Bing",
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               "name": "MSN Homepage & Bing Search Engine",
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
fcfenmboojpjinhpgggodefccipikbpd\0.0.0.8_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               "name": "PDF to Word Doc Converter",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
fjhedcdiaeighcnidfhegnmfieiejmdj\1.0.2.4_0 No File
CHR Plugin: (Zoominto
               "permissions": [ "contextMenus" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.5.14"
            },
            "path": "fnkoafephiilajeompiffeohpcloapob\\4.5.14_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "gfdkimpbcpahaombhbimeihdjnejgicl": {
            "active_permissions": {
               "api": [ "feedbackPrivate" ],
               "explicit_host": [ "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "feedbackPrivate.onFeedbackRequested" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852587571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "js/event_handler.js" ]
                  },
                  "content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
               },
               "description": "User feedback extension",
               "display_in_launcher": false,
               "display_in_new_tab_page": false,
               "icons": {
                  "32": "images/icon32.png",
                  "64": "images/icon64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
               "manifest_version": 2,
               Feedback
               "permissions": [ "feedbackPrivate", "chrome://resources/" ],
               "version": "1.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\feedback",
            "running": false,
            "was_installed_by_default": false
         },
         "gighmmpiobklfepjocnamgkkbiglidom": {
            "active_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.autorevue.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.mobilmania.cz/*", "*://*.sportrevue.cz/*", "*://*.youtube.com/*", "*://*.zive.cz/*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "proxy", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "http://*/*", "https://*/*" ]
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085764334542395",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "punycode.min.js", "jquery/jquery.min.js", "port.js", "functions.js", "stats.js", "survey.js", "filtering/domainset.js", "filtering/filteroptions.js", "filtering/filtertypes.js", "filtering/filterset.js", "filtering/myfilters.js", "filtering/filternormalizer.js", "idlehandler.js", "dropbox-datastores.js", "gab_question.js", "background.js", "datacollection.js" ]
               },
               "browser_action": {
                  "default_icon": {
                     "19": "img/icon19.png",
                     "38": "img/icon38.png"
                  },
                  "default_popup": "button/popup.html",
                  "default_title": "AdBlock - click for details"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "js": [ "bandaids.js" ],

"matches": [ "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.getadblock.com/*", "*://*.mobilmania.cz/*", "*://*.zive.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.sportrevue.cz/*", "*://*.autorevue.cz/*", "*://*.youtube.com/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": true,
                  "js": [ "port.js", "functions.js", "filtering/filteroptions.js", "adblock_start_common.js", "adblock_start_chrome.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": false,
                  "js": [ "uiscripts/blacklisting/rightclick_hook.js", "notificationoverlay.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "default-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; frame-src 'self' https://chromeadblock.comhttps://getadblock.com",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "AdBlock. The #1 ad blocker with over 200 million downloads. Blocks YouTube, Facebook and ALL ads by default (unlike Adblock Plus).",
               "icons": {
                  "128": "img/icon128.png",
                  "16": "img/icon16.png",
                  "48": "img/icon48.png"
               },
               "incognito": "spanning",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZWWNkerYNFB0SIg87WwcrcniMYkCqxLz4OB3CLNoogUUsHN+Rk9vRB7o3Jjc4shlz2LBvAbtPbrGkU+NK9Hc3ubVydzpnoRDEl1RKz3GhqKFkECvTyAxrsKainXH+4Ni2+K7bg1U0tLoQMPJ9f3ieYLIwXeHh9+lYXQi6soq0pwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "23",
               AdBlock
               "optional_permissions": [ "management" ],
               "options_page": "options/index.html",
               "permissions": [ "http://*/*", "https://*/*", "contextMenus", "tabs", "idle", "webRequest", "webRequestBlocking", "webNavigation", "alarms", "storage", "notifications" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.39",
               "web_accessible_resources": [ "img/icon24.png", "img/icon48.png", "jquery/css/images/ui-bg_inset-hard_100_fcfdfd_1x100.png", "jquery/css/images/ui-icons_056b93_256x240.png", "jquery/css/images/ui-icons_d8e7f3_256x240.png", "jquery/css/jquery-ui.custom.css", "jquery/css/override-page.css", "chrome_oauth_receiver.html" ]
            },
            "path": "gighmmpiobklfepjocnamgkkbiglidom\\2.39_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "uninstall_url": "https://getadblock.c...1441747503964",
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "hbdkkfheckcdppiaiabobmennhijkknn": {
            "active_permissions": {
               "api": [ "cookies", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "tabs", "webNavigation", "webRequest", "webRequestInternal" ],
               "explicit_host": [ "*://*/*" ],
               "scriptable_host": [ "*://*/*" ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13086290396502996",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "jsr/fsa.js", "jsr/en_public-chrome.js", "jsr/en_project.js", "jsr/en_background.js" ]
               },
               "background_page": "background.html",
               "browser_action": {
                  "default_icon": "image/prx.png",
                  "default_popup": "popup.html",
                  "default_title": "Open SEO Stats"
               },
               "content_scripts": [ {
                  "js": [ "jsr/en_content-pagespeed.js" ],
                  "matches": [ "*://*/*" ]
               } ],
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Shows Google PageRank and AlexaRank of current web page, quick access to Geo IP Location, Whois, Alexa, backlinks and indexed pages",
               "icons": {
                  "128": "image/logo-128.png",
                  "32": "image/logo-32.png",
                  "48": "image/logo-48.png",
                  "64": "image/logo-64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZR2cXVshOp879X/MzlTrSSlfOjqJ+/Lew1M8gdk9VHPGaVdbRXMjKwsnlrVVYY+iXFTo8tJfYxkEoc2pFimIkI87Kq+zxx9C7xzW44l1ZJO//nvJ+P7PkoGVpD3ZClAW2LT0NYbKzgSuKzM48NenmfKjdHDBzhs8YE2yNFNL0swIDAQAB",
               "manifest_version": 2,
               Open SEO Stats(Formerly: PageRank Status)
               "options_page": "options.html",
               "permissions": [ "http://*/*", "https://*/*", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "cookies", "storage", "unlimitedStorage" ],
               "short_name": "Open SEO Stats",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "9.2.0.0",
               "web_accessible_resources": [ "frame-seostats.html", "frame-siteinfo.html", "frame-pageinfo.html", "frame-pagespeed.html", "frame-webtools.html", "jsr/en_content.js" ]
            },
            "path": "hbdkkfheckcdppiaiabobmennhijkknn\\9.2.0.0_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "jklnfleekcmgejlhppdjjillnccgaalb": {
            "active_permissions": {
               "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "http://*/*", "https://*/*" ]
            },
            "disable_reasons": 1,
            "state": 0
         },
         "jkompbllimaoekaogchhkmkdogpkhojg": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13075866593868888",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "background.js" ]
               },
               "browser_action": {
                  "default_icon": "img/off128.png"
               },
               "content_scripts": [ {
                  "css": [ "style.css" ],
                  "js": [ "jquery-2.1.1.min.js", "content-script.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*" ],
                  "run_at": "document_end"
               } ],
               "description": "",
               "icons": {
                  "128": "img/on128.png",
                  "16": "img/on128.png",
                  "48": "img/on128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko4rW403eAjDikH7Ppr0xc1A+rwIutI/0oDg8OVa5habvCPqN1psh3FUWfZH+5KCb8C2FOQ6IO13nTMczEfzM6X/PjgzeWrP79dmFVH8RRYZuMxS6r6j9+T3jpZhC9HWRy3xW9+/6oAc7LiGcjtIOtUl3USO4d0p1/YGvmDR2JefH/WSec2Qkxn1YnoK8egAzhYdwuPV/Bn3kWzZYA3cZCaJhxhsiaZaycDF0GI5IcIT6PHay9/rQqtiLnpF612luzClrexqU/5QsK1hkwaIWKtAUpbwor/MBsQkLjI+FyjtmL5xhDT2Bly4wP5ST/BP5wTUr80VMbl6pZ43P4NaKwIDAQAB",
               "manifest_version": 2,
               DS Amazon Quick View
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.1"
            },
            "path": "jkompbllimaoekaogchhkmkdogpkhojg\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "klgpelgeohjghmccooegimcfhanlnngc": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13082508031761141",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "scripts/background.js" ]
               },
               "browser_action": {

               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "styles/style.css" ],
                  "js": [ "scripts/jquery-2.1.1.min.js", "scripts/contentscript.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*", "*://*.amazon.ca/*", "*://*.amazon.in/*", "*://*.amazon.co.jp/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.cn/*", "*://*.amazon.com.mx/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "script-src 'self' https://ssl.google-analytics.com;object-src 'self'",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "If you are selling on Amazon marketplace, 'AMZ Seller Browser' will save you hours and speed your products research.",
               "icons": {
                  "128": "images/Add_product_arrow-on.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRBwUWQz5+ao88MFw0RAccjwQLutb5/fXz198Oyezh2LF1qSskdKUbYzsTwukuO2jeWUNshPhpcaMp936qfbAEVOzPDt6sj6S1jVNOfbHDlbXvOyZTmDVUcrUa43cO9UqNWMS442n9Vwa7gspCNB4MNuPqQ9vEUQVm8YzNLuJNLQ3kdvXoAkuyLb0uvvUGVnVvHeLepw4o4z4szXRKCcGVFv/Lb34IOeReS5HQqLnTfoeUL7zt5zJYFot2WHz7Djt5EI+Thej5+h/tz7bGywLIrxNZbKGuVxBrapbTdka+jjhjE8tMaieSoqZmKrHEYjIiK64SREFmP2H3pruJepQIDAQAB",
               "manifest_version": 2,
               AMZ Seller Browser
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.0.7"
            },
            "path": "klgpelgeohjghmccooegimcfhanlnngc\\2.0.7_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "kmendfapggjehodndflmmgagdbamhnfd": {
            "active_permissions": {
               "api": [ "hid", "usb", {
                  "usbDevices": [ {
                     "interfaceId": -1,
                     "productId": 24579,
                     "vendorId": 1419
                  }, {
                     "interfaceId": -1,
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 9601
                  } ]
               }, "webConnectable" ],
               "explicit_host": [ "https://www.gstatic.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13057243202970511",
            "location": 5,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "cryptotokenbackground.js" ]
               },
               "description": "CryptoToken Component Extension",
               "externally_connectable": {
                  "accepts_tls_channel_id": true,
                  "matches": [ "https://accounts.google.com/*","https://security.google.com/*", "https://login.corp.google.com/*" ]
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB",
               "manifest_version": 2,

CryptoTokenExtension
               "permissions": [ "usb", "hid", "https://www.gstatic.com/",{
                  "usbDevices": [ {
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "productId": 61904,
                     "vendorId": 9601
                  }, {
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "productId": 24579,
                     "vendorId": 1419
                  } ]
               } ],
               "version": "0.8.59"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\38.0.2125.101\\resources\\cryptotoken",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lfgpfhoadcpndoogjiogflmgegfbekec": {
            "active_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.com/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085794659093473",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "author": "http://www.junglescout.com",
               "background": {
                  "persistent": true,
                  "scripts": [ "js/background.js" ]
               },
               "browser_action": {
                  "default_icon": "images/48.png",
                  "default_popup": "popup.html"
               },
               "content_scripts": [ {
                  "css": [ "css/jsPopup.css" ],
                  "js": [ "js/libraries/jquery.js", "js/libraries/enscroll.js", "js/libraries/jquery.tablesorter.js", "js/libraries/table2csv.js", "js/regexer.js", "js/common.js", "js/parser.js", "js/currentState.js", "js/sellerPage.js", "js/storefront.js", "js/jsPopup.js", "js/productPage.js" ],
                  "matches": [ "*://www.amazon.com/*", "*://www.amazon.co.uk/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.ca/*" ],
                  "run_at": "document_start"
               } ],
               "content_security_policy": "script-src 'self' 'unsafe-eval' https://ssl.google-analytics.com;object-src 'self'",
               "description": "Amazon and FBA product research made easy. Extract rank, sales volume, estimated revenue and more without entering the product page.",
               "homepage_url": "http://www.junglescout.com",
               "icons": {
                  "128": "images/128.png",
                  "16": "images/16.png",
                  "48": "images/48.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUizN/5VBQBRBJzP+SuNkk/r2nW1FWU1Q409NTHVEObww/0qoMJQKUl+7gsD3rCbNS41dAmNBwhm9aT/067G5TaOjCbbRQLYWp8Wu5nxIFu+EqMUatHMUbNbxRhY60+Z6lVGvuRJ1bDc+W4JRb90H/Kv34t501LbYlznjqcnFVg3gespi63FA1EYF+zDrYuMlDGitUrSq2Ichfv7k07BLVrL72um6qApoW8sHjD2dhDBZLX1ZojzFBi3yk12KuhMHC9VX5/N+9/wkYHHAkgAkQm+lYkddVq/tDCvSWIc8R3JoA0IAVo0+03C1H/8OyZh2V6wjwoKb0bGRuS6WgVevwIDAQAB",
               "manifest_version": 2,
               Jungle Scout
               "permissions": [ "tabs", "background", "storage", "unlimitedStorage", "*://www.amazon.com/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*", "*://www.amazon.ca/*", "*://www.junglescout.com/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.6.0",
               "web_accessible_resources": [ "*" ]
            },
            "path": "lfgpfhoadcpndoogjiogflmgegfbekec\\3.6.0_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lifbcibllhkdhoafpjfnlhfpfgnpldfl": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "tabs" ],
               "explicit_host": [ "https://c2c-director...manager.net/*","https://c2c-directory-pre.trafficmanager.net/*", "https://c2c-directory-qa.trafficmanager.net/*", "https://localhost:26143/*", "https://pnrws.skype.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "file:///*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13076431482200707",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "browser_action": {
                  "default_icon": {
                     "19": "c2c_48x48.png"
                  },
                  "default_popup": "c2c_options_menu.html",
                  "default_title": "Skype Click to Call"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "number_highlighting.css", "number_highlighting_chrome.css" ],
                  "js": [ "jquery-2.1.0.min.js", "mutation-summary.js", "localization.js", "browserSpecificScript.js", "number_highlighting_builder.js", "pnr.js", "fpnr.js", "contentscript.js" ],
                  "matches": [ "http://*/*", "https://*/*", "file://*/*" ],
                  "run_at": "document_end"
               } ],
               "description": "Skype Click to Call",
               "icons": {
                  "128": "c2c_128x128.png",
                  "16": "c2c_16x16.png",
                  "48": "c2c_48x48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB",
               "manifest_version": 2,
               Skype Click to Call
               "permissions": [ "tabs", "https://pnrws.skype.com/","https://c2c-directory-dev.trafficmanager.net/", "https://c2c-directory-pre.trafficmanager.net/", "https://c2c-directory-qa.trafficmanager.net/", "https://localhost:26143/" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "7.4.0.9058",
               "web_accessible_resources": [ "call_skype_logo.png", "call_icon.png", "menu_handler.js", "telemetry.js" ]
            },
            "path": "lifbcibllhkdhoafpjfnlhfpfgnpldfl\\7.4.0.9058_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lmjegmlicamnimmfhcmpkclmigmmcbeh": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "nativeMessaging", "webConnectable" ],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13059638301654907",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "description": "Open Drive files directly from your browser in compatible applications installed on your computer.",
               "externally_connectable": {
                  "matches": [ "*://*.google.com/*" ]
               },
               "icons": {
                  "16": "images/drive-sync16.png",
                  "256": "images/drive-sync256.png",
                  "64": "images/drive-sync64.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ls4QXUUamoPAlpgJvnpfy2H/54Zsl5mMSrs1zWaIcVqyGRTvzE9d7ekAfJXoPTplwddWd5Kz0QODFPLTxgl+R9wKhrLgeJi6V4Mx8pzDXgxujlQsiHZjikvWEFhMeXssh+W+AbYt9HJnxnYTg3VD2vXc5hO4eApJ8GGIJijMqVSR4YkwttJhxMwuGWyc1WU/b2OsuCsTBOq52HsWZZoZ0iuN51Iu7kBREYMc/QD6p/YFt9WEWzJwC2/G8JoTL+KD9V++tEsMqBOivNfcLAIp04BViC9plYmcNjtYJ9aCGwIQmNKeUHKRado9nHloeKm8m7GZp+JNQNEJDcaiFzewIDAQAB",
               "manifest_version": 2,
               Application Launcher for Drive (by Google)
               "permissions": [ "nativeMessaging" ],
               "short_name": "Google Drive App Launcher",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.2"
            },
            "path": "lmjegmlicamnimmfhcmpkclmigmmcbeh\\3.2_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "mfehgcgbbipciphmccgaenjidiccnmng": {
            "active_permissions": {
               "api": [ "cloudPrintPrivate" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852579571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "https://www.google.com/cloudprint"
                  },
                  "urls": [ "https://www.google.c...rome_connector"]
               },
               "description": "Cloud Print",
               "display_in_launcher": false,
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB",
               Cloud Print
               "permissions": [ "cloudPrintPrivate" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\cloud_print",
            "was_installed_by_default": false
         },
         "mgndgikekgjfcpckkfioiadnlibdjbkf": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "n",
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852582571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://THIS-WILL-BE-REPLACED"
                  }
               },
               "description": "Chrome as an app",
               "display_in_launcher": true,
               "display_in_new_tab_page": false,
               "icons": {
                  "128": "product_logo_128.png",
                  "16": "product_logo_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB",
               Chrome
               "version": "0.1"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\chrome_app") - "name": "Zoominto",
               "permissions": [ "contextMenus" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.5.14"
            },
fnkoafephiilajeompiffeohpcloapob\4.5.14_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "gfdkimpbcpahaombhbimeihdjnejgicl": {
            "active_permissions": {
               "api": [ "feedbackPrivate" ],
               "explicit_host": [ "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "feedbackPrivate.onFeedbackRequested" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852587571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "js/event_handler.js" ]
                  },
                  "content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
               },
               "description": "User feedback extension",
               "display_in_launcher": false,
               "display_in_new_tab_page": false,
               "icons": {
                  "32": "images/icon32.png",
                  "64": "images/icon64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
               "manifest_version": 2,
               "name": "Feedback",
               "permissions": [ "feedbackPrivate", "chrome://resources/" ],
               "version": "1.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\feedback,
            "running": false,
            "was_installed_by_default": false
         },
         "gighmmpiobklfepjocnamgkkbiglidom": {
            "active_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.autorevue.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.mobilmania.cz/*", "*://*.sportrevue.cz/*", "*://*.youtube.com/*", "*://*.zive.cz/*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],

"from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "proxy", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "http://*/*", "https://*/*" ]
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085764334542395",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "punycode.min.js", "jquery/jquery.min.js", "port.js", "functions.js", "stats.js", "survey.js", "filtering/domainset.js", "filtering/filteroptions.js", "filtering/filtertypes.js", "filtering/filterset.js", "filtering/myfilters.js", "filtering/filternormalizer.js", "idlehandler.js", "dropbox-datastores.js", "gab_question.js", "background.js", "datacollection.js" ]
               },
               "browser_action": {
                  "default_icon": {
                     "19": "img/icon19.png",
                     "38": "img/icon38.png"
                  },
                  "default_popup": "button/popup.html",
                  "default_title": "AdBlock - click for details"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "js": [ "bandaids.js" ],
                  "matches": [ "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.getadblock.com/*", "*://*.mobilmania.cz/*", "*://*.zive.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.sportrevue.cz/*", "*://*.autorevue.cz/*", "*://*.youtube.com/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": true,
                  "js": [ "port.js", "functions.js", "filtering/filteroptions.js", "adblock_start_common.js", "adblock_start_chrome.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": false,
                  "js": [ "uiscripts/blacklisting/rightclick_hook.js", "notificationoverlay.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "default-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; frame-src 'self' https://chromeadblock.comhttps://getadblock.com",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "AdBlock. The #1 ad blocker with over 200 million downloads. Blocks YouTube, Facebook and ALL ads by default (unlike Adblock Plus).",
               "icons": {
                  "128": "img/icon128.png",
                  "16": "img/icon16.png",
                  "48": "img/icon48.png"
               },
               "incognito": "spanning",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZWWNkerYNFB0SIg87WwcrcniMYkCqxLz4OB3CLNoogUUsHN+Rk9vRB7o3Jjc4shlz2LBvAbtPbrGkU+NK9Hc3ubVydzpnoRDEl1RKz3GhqKFkECvTyAxrsKainXH+4Ni2+K7bg1U0tLoQMPJ9f3ieYLIwXeHh9+lYXQi6soq0pwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "23",
               "name": "AdBlock",
               "optional_permissions": [ "management" ],
               "options_page": "options/index.html",
               "permissions": [ "http://*/*", "https://*/*", "contextMenus", "tabs", "idle", "webRequest", "webRequestBlocking", "webNavigation", "alarms", "storage", "notifications" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.39",
               "web_accessible_resources": [ "img/icon24.png", "img/icon48.png", "jquery/css/images/ui-bg_inset-hard_100_fcfdfd_1x100.png", "jquery/css/images/ui-icons_056b93_256x240.png", "jquery/css/images/ui-icons_d8e7f3_256x240.png", "jquery/css/jquery-ui.custom.css", "jquery/css/override-page.css", "chrome_oauth_receiver.html" ]
            },
gighmmpiobklfepjocnamgkkbiglidom\2.39_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "uninstall_url": "https://getadblock.c...1441747503964",
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "hbdkkfheckcdppiaiabobmennhijkknn": {
            "active_permissions": {
               "api": [ "cookies", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "tabs", "webNavigation", "webRequest", "webRequestInternal" ],
               "explicit_host": [ "*://*/*" ],
               "scriptable_host": [ "*://*/*" ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13086290396502996",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "jsr/fsa.js", "jsr/en_public-chrome.js", "jsr/en_project.js", "jsr/en_background.js" ]
               },
               "background_page": "background.html",
               "browser_action": {
                  "default_icon": "image/prx.png",
                  "default_popup": "popup.html",
                  "default_title": "Open SEO Stats"
               },
               "content_scripts": [ {
                  "js": [ "jsr/en_content-pagespeed.js" ],
                  "matches": [ "*://*/*" ]
               } ],
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Shows Google PageRank and AlexaRank of current web page, quick access to Geo IP Location, Whois, Alexa, backlinks and indexed pages",
               "icons": {
                  "128": "image/logo-128.png",
                  "32": "image/logo-32.png",
                  "48": "image/logo-48.png",
                  "64": "image/logo-64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZR2cXVshOp879X/MzlTrSSlfOjqJ+/Lew1M8gdk9VHPGaVdbRXMjKwsnlrVVYY+iXFTo8tJfYxkEoc2pFimIkI87Kq+zxx9C7xzW44l1ZJO//nvJ+P7PkoGVpD3ZClAW2LT0NYbKzgSuKzM48NenmfKjdHDBzhs8YE2yNFNL0swIDAQAB",
               "manifest_version": 2,
               "name": "Open SEO Stats(Formerly: PageRank Status)",
               "options_page": "options.html",
               "permissions": [ "http://*/*", "https://*/*", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "cookies", "storage", "unlimitedStorage" ],
               "short_name": "Open SEO Stats",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "9.2.0.0",
               "web_accessible_resources": [ "frame-seostats.html", "frame-siteinfo.html", "frame-pageinfo.html", "frame-pagespeed.html", "frame-webtools.html", "jsr/en_content.js" ]
            },
hbdkkfheckcdppiaiabobmennhijkknn\9.2.0.0_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "jklnfleekcmgejlhppdjjillnccgaalb": {
            "active_permissions": {
               "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "http://*/*", "https://*/*" ]
            },
            "disable_reasons": 1,
            "state": 0
         },
         "jkompbllimaoekaogchhkmkdogpkhojg": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13075866593868888",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "background.js" ]
               },
               "browser_action": {
                  "default_icon": "img/off128.png"
               },
               "content_scripts": [ {
                  "css": [ "style.css" ],
                  "js": [ "jquery-2.1.1.min.js", "content-script.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*" ],
                  "run_at": "document_end"
               } ],
               "description": "",
               "icons": {
                  "128": "img/on128.png",
                  "16": "img/on128.png",
                  "48": "img/on128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko4rW403eAjDikH7Ppr0xc1A+rwIutI/0oDg8OVa5habvCPqN1psh3FUWfZH+5KCb8C2FOQ6IO13nTMczEfzM6X/PjgzeWrP79dmFVH8RRYZuMxS6r6j9+T3jpZhC9HWRy3xW9+/6oAc7LiGcjtIOtUl3USO4d0p1/YGvmDR2JefH/WSec2Qkxn1YnoK8egAzhYdwuPV/Bn3kWzZYA3cZCaJhxhsiaZaycDF0GI5IcIT6PHay9/rQqtiLnpF612luzClrexqU/5QsK1hkwaIWKtAUpbwor/MBsQkLjI+FyjtmL5xhDT2Bly4wP5ST/BP5wTUr80VMbl6pZ43P4NaKwIDAQAB",
               "manifest_version": 2,
               "name": "DS Amazon Quick View",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.1"
            },
jkompbllimaoekaogchhkmkdogpkhojg\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "klgpelgeohjghmccooegimcfhanlnngc": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13082508031761141",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "scripts/background.js" ]
               },
               "browser_action": {

               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "styles/style.css" ],
                  "js": [ "scripts/jquery-2.1.1.min.js", "scripts/contentscript.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*", "*://*.amazon.ca/*", "*://*.amazon.in/*", "*://*.amazon.co.jp/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.cn/*", "*://*.amazon.com.mx/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "script-src 'self' https://ssl.google-analytics.com;object-src 'self'",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "If you are selling on Amazon marketplace, 'AMZ Seller Browser' will save you hours and speed your products research.",
               "icons": {
                  "128": "images/Add_product_arrow-on.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRBwUWQz5+ao88MFw0RAccjwQLutb5/fXz198Oyezh2LF1qSskdKUbYzsTwukuO2jeWUNshPhpcaMp936qfbAEVOzPDt6sj6S1jVNOfbHDlbXvOyZTmDVUcrUa43cO9UqNWMS442n9Vwa7gspCNB4MNuPqQ9vEUQVm8YzNLuJNLQ3kdvXoAkuyLb0uvvUGVnVvHeLepw4o4z4szXRKCcGVFv/Lb34IOeReS5HQqLnTfoeUL7zt5zJYFot2WHz7Djt5EI+Thej5+h/tz7bGywLIrxNZbKGuVxBrapbTdka+jjhjE8tMaieSoqZmKrHEYjIiK64SREFmP2H3pruJepQIDAQAB",
               "manifest_version": 2,
               "name": "AMZ Seller Browser",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.0.7"
            },
klgpelgeohjghmccooegimcfhanlnngc\2.0.7_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "kmendfapggjehodndflmmgagdbamhnfd": {
            "active_permissions": {
               "api": [ "hid", "usb", {
                  "usbDevices": [ {
                     "interfaceId": -1,
                     "productId": 24579,
                     "vendorId": 1419
                  }, {
                     "interfaceId": -1,
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 9601
                  } ]
               }, "webConnectable" ],
               "explicit_host": [ "https://www.gstatic.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13057243202970511",
            "location": 5,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "cryptotokenbackground.js" ]
               },
               "description": "CryptoToken Component Extension",
               "externally_connectable": {
                  "accepts_tls_channel_id": true,
                  "matches": [ "https://accounts.google.com/*","https://security.google.com/*", "https://login.corp.google.com/*" ]
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB",
               "manifest_version": 2,
               "name": "CryptoTokenExtension",
               "permissions": [ "usb", "hid", "https://www.gstatic.com/",{
                  "usbDevices": [ {
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "productId": 61904,
                     "vendorId": 9601
                  }, {
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "productId": 24579,
                     "vendorId": 1419
                  } ]
               } ],
               "version": "0.8.59"
            },
C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\resources\cryptotoken,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lfgpfhoadcpndoogjiogflmgegfbekec": {
            "active_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.com/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085794659093473",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {

"author": "http://www.junglescout.com",
               "background": {
                  "persistent": true,
                  "scripts": [ "js/background.js" ]
               },
               "browser_action": {
                  "default_icon": "images/48.png",
                  "default_popup": "popup.html"
               },
               "content_scripts": [ {
                  "css": [ "css/jsPopup.css" ],
                  "js": [ "js/libraries/jquery.js", "js/libraries/enscroll.js", "js/libraries/jquery.tablesorter.js", "js/libraries/table2csv.js", "js/regexer.js", "js/common.js", "js/parser.js", "js/currentState.js", "js/sellerPage.js", "js/storefront.js", "js/jsPopup.js", "js/productPage.js" ],
                  "matches": [ "*://www.amazon.com/*", "*://www.amazon.co.uk/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.ca/*" ],
                  "run_at": "document_start"
               } ],
               "content_security_policy": "script-src 'self' 'unsafe-eval' https://ssl.google-analytics.com;object-src 'self'",
               "description": "Amazon and FBA product research made easy. Extract rank, sales volume, estimated revenue and more without entering the product page.",
               "homepage_url": "http://www.junglescout.com",
               "icons": {
                  "128": "images/128.png",
                  "16": "images/16.png",
                  "48": "images/48.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUizN/5VBQBRBJzP+SuNkk/r2nW1FWU1Q409NTHVEObww/0qoMJQKUl+7gsD3rCbNS41dAmNBwhm9aT/067G5TaOjCbbRQLYWp8Wu5nxIFu+EqMUatHMUbNbxRhY60+Z6lVGvuRJ1bDc+W4JRb90H/Kv34t501LbYlznjqcnFVg3gespi63FA1EYF+zDrYuMlDGitUrSq2Ichfv7k07BLVrL72um6qApoW8sHjD2dhDBZLX1ZojzFBi3yk12KuhMHC9VX5/N+9/wkYHHAkgAkQm+lYkddVq/tDCvSWIc8R3JoA0IAVo0+03C1H/8OyZh2V6wjwoKb0bGRuS6WgVevwIDAQAB",
               "manifest_version": 2,
               "name": "Jungle Scout",
               "permissions": [ "tabs", "background", "storage", "unlimitedStorage", "*://www.amazon.com/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*", "*://www.amazon.ca/*", "*://www.junglescout.com/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.6.0",
               "web_accessible_resources": [ "*" ]
            },
lfgpfhoadcpndoogjiogflmgegfbekec\3.6.0_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lifbcibllhkdhoafpjfnlhfpfgnpldfl": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "tabs" ],
               "explicit_host": [ "https://c2c-director...manager.net/*","https://c2c-directory-pre.trafficmanager.net/*", "https://c2c-directory-qa.trafficmanager.net/*", "https://localhost:26143/*", "https://pnrws.skype.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "file:///*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13076431482200707",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "browser_action": {
                  "default_icon": {
                     "19": "c2c_48x48.png"
                  },
                  "default_popup": "c2c_options_menu.html",
                  "default_title": "Skype Click to Call"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "number_highlighting.css", "number_highlighting_chrome.css" ],
                  "js": [ "jquery-2.1.0.min.js", "mutation-summary.js", "localization.js", "browserSpecificScript.js", "number_highlighting_builder.js", "pnr.js", "fpnr.js", "contentscript.js" ],
                  "matches": [ "http://*/*", "https://*/*", "file://*/*" ],
                  "run_at": "document_end"
               } ],
               "description": "Skype Click to Call",
               "icons": {
                  "128": "c2c_128x128.png",
                  "16": "c2c_16x16.png",
                  "48": "c2c_48x48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB",
               "manifest_version": 2,
               "name": "Skype Click to Call",
               "permissions": [ "tabs", "https://pnrws.skype.com/","https://c2c-directory-dev.trafficmanager.net/", "https://c2c-directory-pre.trafficmanager.net/", "https://c2c-directory-qa.trafficmanager.net/", "https://localhost:26143/" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "7.4.0.9058",
               "web_accessible_resources": [ "call_skype_logo.png", "call_icon.png", "menu_handler.js", "telemetry.js" ]
            },
lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.4.0.9058_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lmjegmlicamnimmfhcmpkclmigmmcbeh": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "nativeMessaging", "webConnectable" ],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13059638301654907",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "description": "Open Drive files directly from your browser in compatible applications installed on your computer.",
               "externally_connectable": {
                  "matches": [ "*://*.google.com/*" ]
               },
               "icons": {
                  "16": "images/drive-sync16.png",
                  "256": "images/drive-sync256.png",
                  "64": "images/drive-sync64.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ls4QXUUamoPAlpgJvnpfy2H/54Zsl5mMSrs1zWaIcVqyGRTvzE9d7ekAfJXoPTplwddWd5Kz0QODFPLTxgl+R9wKhrLgeJi6V4Mx8pzDXgxujlQsiHZjikvWEFhMeXssh+W+AbYt9HJnxnYTg3VD2vXc5hO4eApJ8GGIJijMqVSR4YkwttJhxMwuGWyc1WU/b2OsuCsTBOq52HsWZZoZ0iuN51Iu7kBREYMc/QD6p/YFt9WEWzJwC2/G8JoTL+KD9V++tEsMqBOivNfcLAIp04BViC9plYmcNjtYJ9aCGwIQmNKeUHKRado9nHloeKm8m7GZp+JNQNEJDcaiFzewIDAQAB",
               "manifest_version": 2,
               "name": "Application Launcher for Drive (by Google)",
               "permissions": [ "nativeMessaging" ],
               "short_name": "Google Drive App Launcher",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.2"
            },
lmjegmlicamnimmfhcmpkclmigmmcbeh\3.2_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "mfehgcgbbipciphmccgaenjidiccnmng": {
            "active_permissions": {
               "api": [ "cloudPrintPrivate" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852579571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "https://www.google.com/cloudprint"
                  },
                  "urls": [ "https://www.google.c...rome_connector"]
               },
               "description": "Cloud Print",
               "display_in_launcher": false,
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB",
               "name": "Cloud Print",
               "permissions": [ "cloudPrintPrivate" ],
               "version": "0.1"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\cloud_print,
            "was_installed_by_default": false
         },
         "mgndgikekgjfcpckkfioiadnlibdjbkf": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "n",
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852582571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://THIS-WILL-BE-REPLACED"
                  }
               },
               "description": "Chrome as an app",
               "display_in_launcher": true,
               "display_in_new_tab_page": false,
               "icons": {
                  "128": "product_logo_128.png",
                  "16": "product_logo_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB",
               "name": "Chrome",
               "version": "0.1"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\chrome_app No File
CHR Plugin: () - "name": "Google Network Speech",
               "permissions": [ "systemPrivate", "ttsEngine", "https://www.google.com/"],
               "tts_engine": {
                  "voices": [ {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "en-US",
                     "remote": true,
                     "voice_name": "Google US English"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "male",
                     "lang": "en-GB",
                     "remote": true,
                     "voice_name": "Google UK English Male"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "en-GB",
                     "remote": true,
                     "voice_name": "Google UK English Female"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "es-ES",
                     "remote": true,
                     "voice_name": "Google Español"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "fr-FR",
                     "remote": true,
                     "voice_name": "Google Français"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "it-IT",
                     "remote": true,
                     "voice_name": "Google Italiano"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "de-DE",
                     "remote": true,
                     "voice_name": "Google Deutsch"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "ja-JP",
                     "remote": true,
                     "voice_name": "Google æÂ¥æ¬人"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "ko-KR",
                     "remote": true,
                     "voice_name": "Google íÂÂêµ­ìÂÂ"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "zh-CN",
                     "remote": true,
                     "voice_name": "Google 中å½çÂÂ"
                  } ]
               },
               "version": "1.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\resources\network_speech_synthesis,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false
         },
         "nkeimhogjdpnpccoofpliimaahmaaome": {
            "active_permissions": {
               "api": [ "alarms", "desktopCapture", "processes", "webConnectable", "webrtcAudioPrivate", "webrtcLoggingPrivate", "system.cpu" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,

 


Edited by joy66, 10 September 2015 - 08:57 AM.

  • 0

#9
Naathim

Naathim

    GeekU Minion

  • Expert
  • 4,568 posts
Please do not quote the replies. Just scroll down, on the bottom you will find a window where you can simply paste the answer.

I see that Chrome settings are listed strangely. Before we move on could you please do the following:



chrome.png Reset Chrome to defaults

Please open Google Chrome.
  • Enter the Chrome menu by clicking the chrome-menu.png button.
  • Select Settings.
  • Click Show advanced settings and find the Reset browser settings section.
  • Click Reset browser settings.
  • In the dialog that appears, click Reset.
  • Chrome will reset itself.
Bare in mind that all your browsing history, passwords, cookies will be saved. This procedure will only remove all extensions, themes, plugins etc. and restore Chrome engine to a state similar after a fresh installation.


After that please Uninstall Chrome and do not reinstall (switch to Internet Explorer temporarily if necessary).


Then please re-run FRST as follows.



FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.
  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    > XP users click run after receipt of Windows Security Warning - Open File.
    > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content in your next reply.
  • 0

#10
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

 

 

 

 

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

 

I need help

 

 Everytime I open new tab on Firefox, it redirects to malware search ... resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.htm

 

 This address is highlighted in blue.

 

I have try these :adwcleaner,  tdsskiller, ccleaner, malwarebyle anti malware

i used

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

I try to coup and past but it time me out and said it too long so i had to attach it,  if any one can post that will be fine

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (09-09-2015 18:32:56)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SL5M_FRPage
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Store
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\web_store") - "name": "Store",
               "permissions": [ "webstorePrivate", "management" ],
               "version": "0.2"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\web_store No File
CHR Plugin: (SEOquake
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
            "path": "akdgnmcogleenhbclghghlkkdndkjdjc\\3.0.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               Google Docs
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
            "path": "aohghmighlieiainnegkcijnfilokake\\0.9_0") - "name": "SEOquake",
               "options_page": "options.html",
               "permissions": [ "contextMenus", "notifications", "tabs", "http://*/*", "https://*/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.0.1",
               "web_accessible_resources": [ "/static/ajax-loader.gif", "/static/arrow_down_alt1.png", "/static/arrow_up_alt1.png", "/static/close.png", "/static/density_12x12.png", "/static/diagnosis_12x12.png", "/static/menu-downarrow.gif", "/static/menulogo-enabled.png", "/static/info_12x12.png", "/static/request.png" ]
            },
akdgnmcogleenhbclghghlkkdndkjdjc\3.0.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "aohghmighlieiainnegkcijnfilokake": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "w",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 137,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13067486319871467",
            "last_active_pingday": "13071135602161193",
            "last_launch_time": "13071157754551417",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "619683526622",
               "app": {
                  "launch": {
                     "local_path": "main.html"
                  }
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en_US",
               "description": "Create and edit documents ",
               "icons": {
                  "128": "icon_128.png",
                  "16": "icon_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJhLK6fk/BWTEvJhywpk7jDe4A2r0bGXGOLZW4/AdBp3IiD9o9nx4YjLAtv0tIPxi7MvFd/GUUbQBwHT5wQWONJj1z/0Rc2qBkiJA0yqXh42p0snuA8dCfdlhOLsp7/XTMEwAVasjV5hC4awl78eKfJYlZ+8fM/UldLWJ/51iBQwIDAQAB",
               "manifest_version": 2,
               "name": "Google Docs",
               "offline_enabled": true,
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.9"
            },
            "page_ordinal": "n",
aohghmighlieiainnegkcijnfilokake\0.9_0 No File
CHR Plugin: (Google Drive
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
            "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive",
               "offline_enabled": true,
               "options_page": "https://drive.google.com/settings",
               "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "14.0"
            },
            "page_ordinal": "n",
apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File
CHR Plugin: (Media View
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
            "path": "bbkebpmcomommkhjnahadcnheaomnfab\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,

 

 

"active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               Google Voice Search Hotword (Beta)
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
            "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               YouTube
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
            "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Media View",
               "page_action": {
                  "default_icon": "icon.ico"
               },
               "permissions": [ "http://*/*", "https://*/*" ],
               "version": "1.1"
            },
bbkebpmcomommkhjnahadcnheaomnfab\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 2,
            "was_installed_by_default": false
         },
         "bepbmhgboaologfdajaanbcjmnhjmhfn": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "audioCapture", "hotwordPrivate", "management", "power", "tabs", "webConnectable" ],
               "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*" ],
               "manifest_permissions": [  ]
            },
            "content_settings": [  ],
            "creation_flags": 137,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13051084554614959",
            "lastpingday": "13086255603187116",
            "location": 10,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "description": "This extension allows you to say ‘Ok Google’ and start speaking your search.",
               "externally_connectable": {
                  "ids": [ "dnhpdliibojhegemfjheidglijccjfmc" ],
                  "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
               },
               "icons": {
                  "128": "images/icon-128.png",
                  "16": "images/icon-16.png",
                  "48": "images/icon-48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIZX6oiu1YU4WTZBC5FCFw08u8fPtm75p6l9IzYaCCOjJh47sg1M5eatyBuVVvC2ahku3PzgquBZQZcRkr6kd9sa8jHUBeTQsvPv8yFicYlAqdguFtEK2kbXN2Ff5i61kIe79I6hZKlTJ6KsxiAcOPQpV1uIgJFyrFxTyC1u+WwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "31",
               "name": "Google Voice Search Hotword (Beta)",
               "options_page": "options.html",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ],
               "platforms": [ {
                  "lang": "de",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_de/"
               }, {
                  "lang": "de",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_de/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_en-gb/"
               }, {
                  "lang": "en-GB",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_en-gb/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_fr/"
               }, {
                  "lang": "fr",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_fr/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_ru/"
               }, {
                  "lang": "ru",
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_ru/"
               }, {
                  "nacl_arch": "arm",
                  "sub_package_path": "_platform_specific/arm_/"
               }, {
                  "nacl_arch": "x86-32",
                  "sub_package_path": "_platform_specific/x86-32_/"
               }, {
                  "nacl_arch": "x86-64",
                  "sub_package_path": "_platform_specific/x86-64_/"
               } ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.1.1.5023",
               "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ]
            },
bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": true,
            "was_installed_by_oem": false
         },
         "blpcfgokakmgnkcojhhkbfbldkacnbeo": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "y",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {

"onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13067474341115925",
            "last_active_pingday": "13058002802421027",
            "last_launch_time": "13058046153437042",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://www.youtube.com/?feature=ytca"
                  },
                  "web_content": {
                     "enabled": true,
                     "origin": "http://www.youtube.com"
                  }
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The world's most popular online video community.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
               "manifest_version": 2,
               "name": "YouTube",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.2.7"
            },
            "page_ordinal": "n",
blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0 No File
CHR Plugin: (Adblock Plus
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
            "path": "cfhdojbkjhnklbpkdaibdccddilifddb\\1.9.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               Google Search
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
            "path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_1") - "name": "Adblock Plus",
               "options_page": "options.html",
               "permissions": [ "tabs", "http://*/*", "https://*/*", "contextMenus", "webRequest", "webRequestBlocking", "webNavigation", "storage", "unlimitedStorage", "notifications" ],
               "short_name": "Adblock Plus",
               "storage": {
                  "managed_schema": "managed-storage-schema.json"
               },
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.9.1",
               "web_accessible_resources": [ "block.html" ]
            },
cfhdojbkjhnklbpkdaibdccddilifddb\1.9.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "coobgpohoikkiipiblmjeljniedjpjpf": {
            "ack_external": true,
            "active_bit": false,
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "z",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 153,
            "events": [  ],
            "from_bookmark": true,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196630782907",
            "last_active_pingday": "13041414017733236",
            "last_launch_time": "13040182559632168",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://www.google.co...rce=search_app"
                  },
                  "urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "The fastest way to search the web.",
               "icons": {
                  "128": "128.png",
                  "16": "16.png",
                  "32": "32.png",
                  "48": "48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
               "manifest_version": 2,
               "name": "Google Search",
               "permissions": [  ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "0.0.0.30"
            },
            "page_ordinal": "n",
coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_1 No File
CHR Plugin: (hotword helper
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\37.0.2062.103\\resources\\hotword_helper",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",
               "incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               Bookmark Manager
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\bookmark_manager",
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               Settings
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\settings_app",
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     Bing
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               MSN Homepage & Bing Search Engine
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
            "path": "fcfenmboojpjinhpgggodefccipikbpd\\0.0.0.8_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               PDF to Word Doc Converter
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
            "path": "fjhedcdiaeighcnidfhegnmfieiejmdj\\1.0.2.4_0") - "name": "hotword helper",
               "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
               "version": "0.0.2.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\resources\hotword_helper,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "eemcgdkfndhakfknompkggombfjjjeno": {
            "active_permissions": {
               "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
               "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852570571",
            "location": 5,
            "manifest": {
               "chrome_url_overrides": {
                  "bookmarks": "main.html"
               },
               "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
               "description": "Bookmark Manager",

"incognito": "split",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
               "manifest_version": 2,
               "name": "Bookmark Manager",
               "permissions": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
               "version": "0.1"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\bookmark_manager,
            "was_installed_by_default": false
         },
         "ennkphjdgehloodpbhlhldgbnhmacadg": {
            "active_permissions": {
               "api": [  ],
               "explicit_host": [ "chrome://settings-frame/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "app.runtime.onLaunched" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852585571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "settings_app.js" ]
                  }
               },
               "description": "Settings",
               "display_in_launcher": false,
               "icons": {
                  "128": "settings_app_icon_128.png",
                  "16": "settings_app_icon_16.png",
                  "32": "settings_app_icon_32.png",
                  "48": "settings_app_icon_48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
               "manifest_version": 2,
               "name": "Settings",
               "permissions": [ "chrome://settings-frame/" ],
               "version": "0.2"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\settings_app,
            "running": false,
            "was_installed_by_default": false
         },
         "fcfenmboojpjinhpgggodefccipikbpd": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "cookies", "homepage", "management", "searchProvider", "startupPages" ],
               "explicit_host": [ "http://*.bing.com/*", "http://g.ceipmsn.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_parameter": "UP97",
            "install_time": "13080327746120324",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "chrome_settings_overrides": {
                  "homepage": "http://www.msn.com/?...P&osmkt=en-us",
                  "search_provider": {
                     "encoding": "UTF-8",
                     "favicon_url": "http://www.bing.com/favicon.ico",
                     "is_default": true,
                     "keyword": "bing.com",
                     "name": "Bing",
                     "search_url": "http://www.bing.com/...={searchTerms}"
                  },
                  "startup_pages": [ "http://www.msn.com/?...HP&osmkt=en-us"]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "MSN Homepage & Bing Search Engine",
               "icons": {
                  "128": "Logo_128.ico",
                  "16": "Logo.png",
                  "48": "Logo_48.ico"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JA3sXSSGLZfdufL1gcnN5sgZ7Upqkq0FF8aaRTf8v/banM0MIX3o6XqEV+ireOgQZIz1GcNKMEJ1BpeaheabEGRn3ZqQrO+gwpbeJDhuNcT8MD3npRoColMqG6rPG/b+GxM60gS0bBrELyNB6EeNj1j5hVvZA/VG92sW4Ld/Yqea6iKrs/Vfh99utT6V7CmTPMXLAvY40yufxWHEqpgsqU2gNn1FY94BB0UbWE40t5DHmC6y67F26uBRodQu//TZTd2BxcuGEUohU8jDTAs+dl8wCHGP19xBzWkEnI+RRTtUyZ1IeRY3x7W+Xbe60wz/UeoYQMmCdzdq1WDo8kgtwIDAQAB",
               "manifest_version": 2,
               "name": "MSN Homepage & Bing Search Engine",
               "permissions": [ "http://g.ceipmsn.com/*","http://*.bing.com/*", "cookies", "management" ],
               "short_name": "MSN Homepage & Bing Search Engine",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "0.0.0.8"
            },
fcfenmboojpjinhpgggodefccipikbpd\0.0.0.8_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "fjhedcdiaeighcnidfhegnmfieiejmdj": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "zp",
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "ephemeral_app": false,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13056945215801624",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "api_console_project_id": "363901784508",
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "http://pdftoword.1bestlink.net/"
                  },
                  "urls": [ "http://pdftoword.1bestlink.net/"]
               },
               "container": "GOOGLE_DRIVE",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Free PDF to Word Converter, This allows you to convert your PDF files to word doc for free. Almost 100% accurate.",
               "icons": {
                  "128": "icon128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskax+/0I94BtGvoe6b+T/fwtpcAWoUdWWuKAgTm1OxUYkjFFyOQG6eQZGMk/Pkphk8FM+hZHzmMaSNEYiW7IrteAVkdrBzGI03Xi2NIbEsbPXkXc9/oYKWwzJfbPeeO4+sM1l96g2XVSfRqegcGKbJLFZ+v3EMs/t5srGTf8zjZ0SuIPpgymMaf5+wWAIh+oQxjAEdlFCPqXZ6r++o0KwQSZ1zl8Mw1waiv50YBpdDCQxww4NdQBD6QOmlu1DDpPFhttwFI7TvZrXF928qqMVOrNY/SiRooWJFcdadlYyCYHRc8cc4eo98sM1e2XYpwjL0nzbPjGqCEnA0Wxc50quQIDAQAB",
               "manifest_version": 2,
               "name": "PDF to Word Doc Converter",
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "1.0.2.4"
            },
            "page_ordinal": "n",
fjhedcdiaeighcnidfhegnmfieiejmdj\1.0.2.4_0 No File
CHR Plugin: (Zoominto
               "permissions": [ "contextMenus" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.5.14"
            },
            "path": "fnkoafephiilajeompiffeohpcloapob\\4.5.14_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "gfdkimpbcpahaombhbimeihdjnejgicl": {
            "active_permissions": {
               "api": [ "feedbackPrivate" ],
               "explicit_host": [ "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "feedbackPrivate.onFeedbackRequested" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852587571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "js/event_handler.js" ]
                  },
                  "content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
               },
               "description": "User feedback extension",
               "display_in_launcher": false,
               "display_in_new_tab_page": false,
               "icons": {
                  "32": "images/icon32.png",
                  "64": "images/icon64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
               "manifest_version": 2,
               Feedback
               "permissions": [ "feedbackPrivate", "chrome://resources/" ],
               "version": "1.0"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\feedback",
            "running": false,
            "was_installed_by_default": false
         },
         "gighmmpiobklfepjocnamgkkbiglidom": {
            "active_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.autorevue.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.mobilmania.cz/*", "*://*.sportrevue.cz/*", "*://*.youtube.com/*", "*://*.zive.cz/*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "proxy", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "http://*/*", "https://*/*" ]
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085764334542395",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "punycode.min.js", "jquery/jquery.min.js", "port.js", "functions.js", "stats.js", "survey.js", "filtering/domainset.js", "filtering/filteroptions.js", "filtering/filtertypes.js", "filtering/filterset.js", "filtering/myfilters.js", "filtering/filternormalizer.js", "idlehandler.js", "dropbox-datastores.js", "gab_question.js", "background.js", "datacollection.js" ]
               },
               "browser_action": {
                  "default_icon": {
                     "19": "img/icon19.png",
                     "38": "img/icon38.png"
                  },
                  "default_popup": "button/popup.html",
                  "default_title": "AdBlock - click for details"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "js": [ "bandaids.js" ],

"matches": [ "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.getadblock.com/*", "*://*.mobilmania.cz/*", "*://*.zive.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.sportrevue.cz/*", "*://*.autorevue.cz/*", "*://*.youtube.com/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": true,
                  "js": [ "port.js", "functions.js", "filtering/filteroptions.js", "adblock_start_common.js", "adblock_start_chrome.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": false,
                  "js": [ "uiscripts/blacklisting/rightclick_hook.js", "notificationoverlay.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "default-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; frame-src 'self' https://chromeadblock.comhttps://getadblock.com",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "AdBlock. The #1 ad blocker with over 200 million downloads. Blocks YouTube, Facebook and ALL ads by default (unlike Adblock Plus).",
               "icons": {
                  "128": "img/icon128.png",
                  "16": "img/icon16.png",
                  "48": "img/icon48.png"
               },
               "incognito": "spanning",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZWWNkerYNFB0SIg87WwcrcniMYkCqxLz4OB3CLNoogUUsHN+Rk9vRB7o3Jjc4shlz2LBvAbtPbrGkU+NK9Hc3ubVydzpnoRDEl1RKz3GhqKFkECvTyAxrsKainXH+4Ni2+K7bg1U0tLoQMPJ9f3ieYLIwXeHh9+lYXQi6soq0pwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "23",
               AdBlock
               "optional_permissions": [ "management" ],
               "options_page": "options/index.html",
               "permissions": [ "http://*/*", "https://*/*", "contextMenus", "tabs", "idle", "webRequest", "webRequestBlocking", "webNavigation", "alarms", "storage", "notifications" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.39",
               "web_accessible_resources": [ "img/icon24.png", "img/icon48.png", "jquery/css/images/ui-bg_inset-hard_100_fcfdfd_1x100.png", "jquery/css/images/ui-icons_056b93_256x240.png", "jquery/css/images/ui-icons_d8e7f3_256x240.png", "jquery/css/jquery-ui.custom.css", "jquery/css/override-page.css", "chrome_oauth_receiver.html" ]
            },
            "path": "gighmmpiobklfepjocnamgkkbiglidom\\2.39_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "uninstall_url": "https://getadblock.c...1441747503964",
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "hbdkkfheckcdppiaiabobmennhijkknn": {
            "active_permissions": {
               "api": [ "cookies", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "tabs", "webNavigation", "webRequest", "webRequestInternal" ],
               "explicit_host": [ "*://*/*" ],
               "scriptable_host": [ "*://*/*" ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13086290396502996",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "jsr/fsa.js", "jsr/en_public-chrome.js", "jsr/en_project.js", "jsr/en_background.js" ]
               },
               "background_page": "background.html",
               "browser_action": {
                  "default_icon": "image/prx.png",
                  "default_popup": "popup.html",
                  "default_title": "Open SEO Stats"
               },
               "content_scripts": [ {
                  "js": [ "jsr/en_content-pagespeed.js" ],
                  "matches": [ "*://*/*" ]
               } ],
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Shows Google PageRank and AlexaRank of current web page, quick access to Geo IP Location, Whois, Alexa, backlinks and indexed pages",
               "icons": {
                  "128": "image/logo-128.png",
                  "32": "image/logo-32.png",
                  "48": "image/logo-48.png",
                  "64": "image/logo-64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZR2cXVshOp879X/MzlTrSSlfOjqJ+/Lew1M8gdk9VHPGaVdbRXMjKwsnlrVVYY+iXFTo8tJfYxkEoc2pFimIkI87Kq+zxx9C7xzW44l1ZJO//nvJ+P7PkoGVpD3ZClAW2LT0NYbKzgSuKzM48NenmfKjdHDBzhs8YE2yNFNL0swIDAQAB",
               "manifest_version": 2,
               Open SEO Stats(Formerly: PageRank Status)
               "options_page": "options.html",
               "permissions": [ "http://*/*", "https://*/*", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "cookies", "storage", "unlimitedStorage" ],
               "short_name": "Open SEO Stats",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "9.2.0.0",
               "web_accessible_resources": [ "frame-seostats.html", "frame-siteinfo.html", "frame-pageinfo.html", "frame-pagespeed.html", "frame-webtools.html", "jsr/en_content.js" ]
            },
            "path": "hbdkkfheckcdppiaiabobmennhijkknn\\9.2.0.0_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "jklnfleekcmgejlhppdjjillnccgaalb": {
            "active_permissions": {
               "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "http://*/*", "https://*/*" ]
            },
            "disable_reasons": 1,
            "state": 0
         },
         "jkompbllimaoekaogchhkmkdogpkhojg": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13075866593868888",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "background.js" ]
               },
               "browser_action": {
                  "default_icon": "img/off128.png"
               },
               "content_scripts": [ {
                  "css": [ "style.css" ],
                  "js": [ "jquery-2.1.1.min.js", "content-script.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*" ],
                  "run_at": "document_end"
               } ],
               "description": "",
               "icons": {
                  "128": "img/on128.png",
                  "16": "img/on128.png",
                  "48": "img/on128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko4rW403eAjDikH7Ppr0xc1A+rwIutI/0oDg8OVa5habvCPqN1psh3FUWfZH+5KCb8C2FOQ6IO13nTMczEfzM6X/PjgzeWrP79dmFVH8RRYZuMxS6r6j9+T3jpZhC9HWRy3xW9+/6oAc7LiGcjtIOtUl3USO4d0p1/YGvmDR2JefH/WSec2Qkxn1YnoK8egAzhYdwuPV/Bn3kWzZYA3cZCaJhxhsiaZaycDF0GI5IcIT6PHay9/rQqtiLnpF612luzClrexqU/5QsK1hkwaIWKtAUpbwor/MBsQkLjI+FyjtmL5xhDT2Bly4wP5ST/BP5wTUr80VMbl6pZ43P4NaKwIDAQAB",
               "manifest_version": 2,
               DS Amazon Quick View
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.1"
            },
            "path": "jkompbllimaoekaogchhkmkdogpkhojg\\1.1_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "klgpelgeohjghmccooegimcfhanlnngc": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13082508031761141",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "scripts/background.js" ]
               },
               "browser_action": {

               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "styles/style.css" ],
                  "js": [ "scripts/jquery-2.1.1.min.js", "scripts/contentscript.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*", "*://*.amazon.ca/*", "*://*.amazon.in/*", "*://*.amazon.co.jp/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.cn/*", "*://*.amazon.com.mx/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "script-src 'self' https://ssl.google-analytics.com;object-src 'self'",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "If you are selling on Amazon marketplace, 'AMZ Seller Browser' will save you hours and speed your products research.",
               "icons": {
                  "128": "images/Add_product_arrow-on.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRBwUWQz5+ao88MFw0RAccjwQLutb5/fXz198Oyezh2LF1qSskdKUbYzsTwukuO2jeWUNshPhpcaMp936qfbAEVOzPDt6sj6S1jVNOfbHDlbXvOyZTmDVUcrUa43cO9UqNWMS442n9Vwa7gspCNB4MNuPqQ9vEUQVm8YzNLuJNLQ3kdvXoAkuyLb0uvvUGVnVvHeLepw4o4z4szXRKCcGVFv/Lb34IOeReS5HQqLnTfoeUL7zt5zJYFot2WHz7Djt5EI+Thej5+h/tz7bGywLIrxNZbKGuVxBrapbTdka+jjhjE8tMaieSoqZmKrHEYjIiK64SREFmP2H3pruJepQIDAQAB",
               "manifest_version": 2,
               AMZ Seller Browser
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.0.7"
            },
            "path": "klgpelgeohjghmccooegimcfhanlnngc\\2.0.7_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "kmendfapggjehodndflmmgagdbamhnfd": {
            "active_permissions": {
               "api": [ "hid", "usb", {
                  "usbDevices": [ {
                     "interfaceId": -1,
                     "productId": 24579,
                     "vendorId": 1419
                  }, {
                     "interfaceId": -1,
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 9601
                  } ]
               }, "webConnectable" ],
               "explicit_host": [ "https://www.gstatic.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13057243202970511",
            "location": 5,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "cryptotokenbackground.js" ]
               },
               "description": "CryptoToken Component Extension",
               "externally_connectable": {
                  "accepts_tls_channel_id": true,
                  "matches": [ "https://accounts.google.com/*","https://security.google.com/*", "https://login.corp.google.com/*" ]
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB",
               "manifest_version": 2,

CryptoTokenExtension
               "permissions": [ "usb", "hid", "https://www.gstatic.com/",{
                  "usbDevices": [ {
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "productId": 61904,
                     "vendorId": 9601
                  }, {
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "productId": 24579,
                     "vendorId": 1419
                  } ]
               } ],
               "version": "0.8.59"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\38.0.2125.101\\resources\\cryptotoken",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lfgpfhoadcpndoogjiogflmgegfbekec": {
            "active_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.com/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085794659093473",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "author": "http://www.junglescout.com",
               "background": {
                  "persistent": true,
                  "scripts": [ "js/background.js" ]
               },
               "browser_action": {
                  "default_icon": "images/48.png",
                  "default_popup": "popup.html"
               },
               "content_scripts": [ {
                  "css": [ "css/jsPopup.css" ],
                  "js": [ "js/libraries/jquery.js", "js/libraries/enscroll.js", "js/libraries/jquery.tablesorter.js", "js/libraries/table2csv.js", "js/regexer.js", "js/common.js", "js/parser.js", "js/currentState.js", "js/sellerPage.js", "js/storefront.js", "js/jsPopup.js", "js/productPage.js" ],
                  "matches": [ "*://www.amazon.com/*", "*://www.amazon.co.uk/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.ca/*" ],
                  "run_at": "document_start"
               } ],
               "content_security_policy": "script-src 'self' 'unsafe-eval' https://ssl.google-analytics.com;object-src 'self'",
               "description": "Amazon and FBA product research made easy. Extract rank, sales volume, estimated revenue and more without entering the product page.",
               "homepage_url": "http://www.junglescout.com",
               "icons": {
                  "128": "images/128.png",
                  "16": "images/16.png",
                  "48": "images/48.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUizN/5VBQBRBJzP+SuNkk/r2nW1FWU1Q409NTHVEObww/0qoMJQKUl+7gsD3rCbNS41dAmNBwhm9aT/067G5TaOjCbbRQLYWp8Wu5nxIFu+EqMUatHMUbNbxRhY60+Z6lVGvuRJ1bDc+W4JRb90H/Kv34t501LbYlznjqcnFVg3gespi63FA1EYF+zDrYuMlDGitUrSq2Ichfv7k07BLVrL72um6qApoW8sHjD2dhDBZLX1ZojzFBi3yk12KuhMHC9VX5/N+9/wkYHHAkgAkQm+lYkddVq/tDCvSWIc8R3JoA0IAVo0+03C1H/8OyZh2V6wjwoKb0bGRuS6WgVevwIDAQAB",
               "manifest_version": 2,
               Jungle Scout
               "permissions": [ "tabs", "background", "storage", "unlimitedStorage", "*://www.amazon.com/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*", "*://www.amazon.ca/*", "*://www.junglescout.com/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.6.0",
               "web_accessible_resources": [ "*" ]
            },
            "path": "lfgpfhoadcpndoogjiogflmgegfbekec\\3.6.0_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lifbcibllhkdhoafpjfnlhfpfgnpldfl": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "tabs" ],
               "explicit_host": [ "https://c2c-director...manager.net/*","https://c2c-directory-pre.trafficmanager.net/*", "https://c2c-directory-qa.trafficmanager.net/*", "https://localhost:26143/*", "https://pnrws.skype.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "file:///*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13076431482200707",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "browser_action": {
                  "default_icon": {
                     "19": "c2c_48x48.png"
                  },
                  "default_popup": "c2c_options_menu.html",
                  "default_title": "Skype Click to Call"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "number_highlighting.css", "number_highlighting_chrome.css" ],
                  "js": [ "jquery-2.1.0.min.js", "mutation-summary.js", "localization.js", "browserSpecificScript.js", "number_highlighting_builder.js", "pnr.js", "fpnr.js", "contentscript.js" ],
                  "matches": [ "http://*/*", "https://*/*", "file://*/*" ],
                  "run_at": "document_end"
               } ],
               "description": "Skype Click to Call",
               "icons": {
                  "128": "c2c_128x128.png",
                  "16": "c2c_16x16.png",
                  "48": "c2c_48x48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB",
               "manifest_version": 2,
               Skype Click to Call
               "permissions": [ "tabs", "https://pnrws.skype.com/","https://c2c-directory-dev.trafficmanager.net/", "https://c2c-directory-pre.trafficmanager.net/", "https://c2c-directory-qa.trafficmanager.net/", "https://localhost:26143/" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "7.4.0.9058",
               "web_accessible_resources": [ "call_skype_logo.png", "call_icon.png", "menu_handler.js", "telemetry.js" ]
            },
            "path": "lifbcibllhkdhoafpjfnlhfpfgnpldfl\\7.4.0.9058_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lmjegmlicamnimmfhcmpkclmigmmcbeh": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "nativeMessaging", "webConnectable" ],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13059638301654907",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "description": "Open Drive files directly from your browser in compatible applications installed on your computer.",
               "externally_connectable": {
                  "matches": [ "*://*.google.com/*" ]
               },
               "icons": {
                  "16": "images/drive-sync16.png",
                  "256": "images/drive-sync256.png",
                  "64": "images/drive-sync64.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ls4QXUUamoPAlpgJvnpfy2H/54Zsl5mMSrs1zWaIcVqyGRTvzE9d7ekAfJXoPTplwddWd5Kz0QODFPLTxgl+R9wKhrLgeJi6V4Mx8pzDXgxujlQsiHZjikvWEFhMeXssh+W+AbYt9HJnxnYTg3VD2vXc5hO4eApJ8GGIJijMqVSR4YkwttJhxMwuGWyc1WU/b2OsuCsTBOq52HsWZZoZ0iuN51Iu7kBREYMc/QD6p/YFt9WEWzJwC2/G8JoTL+KD9V++tEsMqBOivNfcLAIp04BViC9plYmcNjtYJ9aCGwIQmNKeUHKRado9nHloeKm8m7GZp+JNQNEJDcaiFzewIDAQAB",
               "manifest_version": 2,
               Application Launcher for Drive (by Google)
               "permissions": [ "nativeMessaging" ],
               "short_name": "Google Drive App Launcher",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.2"
            },
            "path": "lmjegmlicamnimmfhcmpkclmigmmcbeh\\3.2_0",
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "mfehgcgbbipciphmccgaenjidiccnmng": {
            "active_permissions": {
               "api": [ "cloudPrintPrivate" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852579571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "https://www.google.com/cloudprint"
                  },
                  "urls": [ "https://www.google.c...rome_connector"]
               },
               "description": "Cloud Print",
               "display_in_launcher": false,
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB",
               Cloud Print
               "permissions": [ "cloudPrintPrivate" ],
               "version": "0.1"
            },
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\cloud_print",
            "was_installed_by_default": false
         },
         "mgndgikekgjfcpckkfioiadnlibdjbkf": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "n",
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852582571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://THIS-WILL-BE-REPLACED"
                  }
               },
               "description": "Chrome as an app",
               "display_in_launcher": true,
               "display_in_new_tab_page": false,
               "icons": {
                  "128": "product_logo_128.png",
                  "16": "product_logo_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB",
               Chrome
               "version": "0.1"
            },
            "page_ordinal": "n",
            "path": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\32.0.1700.76\\resources\\chrome_app") - "name": "Zoominto",
               "permissions": [ "contextMenus" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "4.5.14"
            },
fnkoafephiilajeompiffeohpcloapob\4.5.14_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "gfdkimpbcpahaombhbimeihdjnejgicl": {
            "active_permissions": {
               "api": [ "feedbackPrivate" ],
               "explicit_host": [ "chrome://resources/*" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [ "feedbackPrivate.onFeedbackRequested" ],
            "from_bookmark": false,
            "from_webstore": false,
            "initial_keybindings_set": true,
            "install_time": "13034618852587571",
            "location": 5,
            "manifest": {
               "app": {
                  "background": {
                     "scripts": [ "js/event_handler.js" ]
                  },
                  "content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
               },
               "description": "User feedback extension",
               "display_in_launcher": false,
               "display_in_new_tab_page": false,
               "icons": {
                  "32": "images/icon32.png",
                  "64": "images/icon64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
               "manifest_version": 2,
               "name": "Feedback",
               "permissions": [ "feedbackPrivate", "chrome://resources/" ],
               "version": "1.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\feedback,
            "running": false,
            "was_installed_by_default": false
         },
         "gighmmpiobklfepjocnamgkkbiglidom": {
            "active_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.autorevue.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.mobilmania.cz/*", "*://*.sportrevue.cz/*", "*://*.youtube.com/*", "*://*.zive.cz/*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],

"from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "alarms", "contextMenus", "idle", "notifications", "proxy", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.getadblock.com/*", "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "http://*/*", "https://*/*" ]
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085764334542395",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "punycode.min.js", "jquery/jquery.min.js", "port.js", "functions.js", "stats.js", "survey.js", "filtering/domainset.js", "filtering/filteroptions.js", "filtering/filtertypes.js", "filtering/filterset.js", "filtering/myfilters.js", "filtering/filternormalizer.js", "idlehandler.js", "dropbox-datastores.js", "gab_question.js", "background.js", "datacollection.js" ]
               },
               "browser_action": {
                  "default_icon": {
                     "19": "img/icon19.png",
                     "38": "img/icon38.png"
                  },
                  "default_popup": "button/popup.html",
                  "default_title": "AdBlock - click for details"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "js": [ "bandaids.js" ],
                  "matches": [ "*://*.mail.live.com/*", "*://*.mastertoons.com/*", "*://*.getadblock.com/*", "*://*.mobilmania.cz/*", "*://*.zive.cz/*", "*://*.doupe.cz/*", "*://*.e15.cz/*", "*://*.sportrevue.cz/*", "*://*.autorevue.cz/*", "*://*.youtube.com/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": true,
                  "js": [ "port.js", "functions.js", "filtering/filteroptions.js", "adblock_start_common.js", "adblock_start_chrome.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_start"
               }, {
                  "all_frames": false,
                  "js": [ "uiscripts/blacklisting/rightclick_hook.js", "notificationoverlay.js" ],
                  "matches": [ "http://*/*", "https://*/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "default-src 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src *; frame-src 'self' https://chromeadblock.comhttps://getadblock.com",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "AdBlock. The #1 ad blocker with over 200 million downloads. Blocks YouTube, Facebook and ALL ads by default (unlike Adblock Plus).",
               "icons": {
                  "128": "img/icon128.png",
                  "16": "img/icon16.png",
                  "48": "img/icon48.png"
               },
               "incognito": "spanning",
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZWWNkerYNFB0SIg87WwcrcniMYkCqxLz4OB3CLNoogUUsHN+Rk9vRB7o3Jjc4shlz2LBvAbtPbrGkU+NK9Hc3ubVydzpnoRDEl1RKz3GhqKFkECvTyAxrsKainXH+4Ni2+K7bg1U0tLoQMPJ9f3ieYLIwXeHh9+lYXQi6soq0pwIDAQAB",
               "manifest_version": 2,
               "minimum_chrome_version": "23",
               "name": "AdBlock",
               "optional_permissions": [ "management" ],
               "options_page": "options/index.html",
               "permissions": [ "http://*/*", "https://*/*", "contextMenus", "tabs", "idle", "webRequest", "webRequestBlocking", "webNavigation", "alarms", "storage", "notifications" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.39",
               "web_accessible_resources": [ "img/icon24.png", "img/icon48.png", "jquery/css/images/ui-bg_inset-hard_100_fcfdfd_1x100.png", "jquery/css/images/ui-icons_056b93_256x240.png", "jquery/css/images/ui-icons_d8e7f3_256x240.png", "jquery/css/jquery-ui.custom.css", "jquery/css/override-page.css", "chrome_oauth_receiver.html" ]
            },
gighmmpiobklfepjocnamgkkbiglidom\2.39_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "uninstall_url": "https://getadblock.c...1441747503964",
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "hbdkkfheckcdppiaiabobmennhijkknn": {
            "active_permissions": {
               "api": [ "cookies", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 33,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "tabs", "webNavigation", "webRequest", "webRequestInternal" ],
               "explicit_host": [ "*://*/*" ],
               "scriptable_host": [ "*://*/*" ]
            },
            "has_declarative_rules": {
               "declarativeContent": {
                  "onPageChanged": false
               },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13086290396502996",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "jsr/fsa.js", "jsr/en_public-chrome.js", "jsr/en_project.js", "jsr/en_background.js" ]
               },
               "background_page": "background.html",
               "browser_action": {
                  "default_icon": "image/prx.png",
                  "default_popup": "popup.html",
                  "default_title": "Open SEO Stats"
               },
               "content_scripts": [ {
                  "js": [ "jsr/en_content-pagespeed.js" ],
                  "matches": [ "*://*/*" ]
               } ],
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Shows Google PageRank and AlexaRank of current web page, quick access to Geo IP Location, Whois, Alexa, backlinks and indexed pages",
               "icons": {
                  "128": "image/logo-128.png",
                  "32": "image/logo-32.png",
                  "48": "image/logo-48.png",
                  "64": "image/logo-64.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZR2cXVshOp879X/MzlTrSSlfOjqJ+/Lew1M8gdk9VHPGaVdbRXMjKwsnlrVVYY+iXFTo8tJfYxkEoc2pFimIkI87Kq+zxx9C7xzW44l1ZJO//nvJ+P7PkoGVpD3ZClAW2LT0NYbKzgSuKzM48NenmfKjdHDBzhs8YE2yNFNL0swIDAQAB",
               "manifest_version": 2,
               "name": "Open SEO Stats(Formerly: PageRank Status)",
               "options_page": "options.html",
               "permissions": [ "http://*/*", "https://*/*", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "cookies", "storage", "unlimitedStorage" ],
               "short_name": "Open SEO Stats",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "9.2.0.0",
               "web_accessible_resources": [ "frame-seostats.html", "frame-siteinfo.html", "frame-pageinfo.html", "frame-pagespeed.html", "frame-webtools.html", "jsr/en_content.js" ]
            },
hbdkkfheckcdppiaiabobmennhijkknn\9.2.0.0_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "jklnfleekcmgejlhppdjjillnccgaalb": {
            "active_permissions": {
               "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ],
               "explicit_host": [ "http://*/*", "https://*/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "http://*/*", "https://*/*" ]
            },
            "disable_reasons": 1,
            "state": 0
         },
         "jkompbllimaoekaogchhkmkdogpkhojg": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.co.uk/*", "*://*.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13075866593868888",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "background.js" ]
               },
               "browser_action": {
                  "default_icon": "img/off128.png"
               },
               "content_scripts": [ {
                  "css": [ "style.css" ],
                  "js": [ "jquery-2.1.1.min.js", "content-script.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*" ],
                  "run_at": "document_end"
               } ],
               "description": "",
               "icons": {
                  "128": "img/on128.png",
                  "16": "img/on128.png",
                  "48": "img/on128.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko4rW403eAjDikH7Ppr0xc1A+rwIutI/0oDg8OVa5habvCPqN1psh3FUWfZH+5KCb8C2FOQ6IO13nTMczEfzM6X/PjgzeWrP79dmFVH8RRYZuMxS6r6j9+T3jpZhC9HWRy3xW9+/6oAc7LiGcjtIOtUl3USO4d0p1/YGvmDR2JefH/WSec2Qkxn1YnoK8egAzhYdwuPV/Bn3kWzZYA3cZCaJhxhsiaZaycDF0GI5IcIT6PHay9/rQqtiLnpF612luzClrexqU/5QsK1hkwaIWKtAUpbwor/MBsQkLjI+FyjtmL5xhDT2Bly4wP5ST/BP5wTUr80VMbl6pZ43P4NaKwIDAQAB",
               "manifest_version": 2,
               "name": "DS Amazon Quick View",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "1.1"
            },
jkompbllimaoekaogchhkmkdogpkhojg\1.1_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "klgpelgeohjghmccooegimcfhanlnngc": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [  ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.mx/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.in/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13082508031761141",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "background": {
                  "scripts": [ "scripts/background.js" ]
               },
               "browser_action": {

               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "styles/style.css" ],
                  "js": [ "scripts/jquery-2.1.1.min.js", "scripts/contentscript.js" ],
                  "matches": [ "*://*.amazon.com/*", "*://*.amazon.co.uk/*", "*://*.amazon.ca/*", "*://*.amazon.in/*", "*://*.amazon.co.jp/*", "*://*.amazon.de/*", "*://*.amazon.fr/*", "*://*.amazon.cn/*", "*://*.amazon.com.mx/*" ],
                  "run_at": "document_end"
               } ],
               "content_security_policy": "script-src 'self' https://ssl.google-analytics.com;object-src 'self'",
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "If you are selling on Amazon marketplace, 'AMZ Seller Browser' will save you hours and speed your products research.",
               "icons": {
                  "128": "images/Add_product_arrow-on.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRBwUWQz5+ao88MFw0RAccjwQLutb5/fXz198Oyezh2LF1qSskdKUbYzsTwukuO2jeWUNshPhpcaMp936qfbAEVOzPDt6sj6S1jVNOfbHDlbXvOyZTmDVUcrUa43cO9UqNWMS442n9Vwa7gspCNB4MNuPqQ9vEUQVm8YzNLuJNLQ3kdvXoAkuyLb0uvvUGVnVvHeLepw4o4z4szXRKCcGVFv/Lb34IOeReS5HQqLnTfoeUL7zt5zJYFot2WHz7Djt5EI+Thej5+h/tz7bGywLIrxNZbKGuVxBrapbTdka+jjhjE8tMaieSoqZmKrHEYjIiK64SREFmP2H3pruJepQIDAQAB",
               "manifest_version": 2,
               "name": "AMZ Seller Browser",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "2.0.7"
            },
klgpelgeohjghmccooegimcfhanlnngc\2.0.7_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "kmendfapggjehodndflmmgagdbamhnfd": {
            "active_permissions": {
               "api": [ "hid", "usb", {
                  "usbDevices": [ {
                     "interfaceId": -1,
                     "productId": 24579,
                     "vendorId": 1419
                  }, {
                     "interfaceId": -1,
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "interfaceId": -1,
                     "productId": 61904,
                     "vendorId": 9601
                  } ]
               }, "webConnectable" ],
               "explicit_host": [ "https://www.gstatic.com/*"],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13057243202970511",
            "location": 5,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "cryptotokenbackground.js" ]
               },
               "description": "CryptoToken Component Extension",
               "externally_connectable": {
                  "accepts_tls_channel_id": true,
                  "matches": [ "https://accounts.google.com/*","https://security.google.com/*", "https://login.corp.google.com/*" ]
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB",
               "manifest_version": 2,
               "name": "CryptoTokenExtension",
               "permissions": [ "usb", "hid", "https://www.gstatic.com/",{
                  "usbDevices": [ {
                     "productId": 529,
                     "vendorId": 4176
                  }, {
                     "productId": 512,
                     "vendorId": 4176
                  }, {
                     "productId": 275,
                     "vendorId": 4176
                  }, {
                     "productId": 277,
                     "vendorId": 4176
                  }, {
                     "productId": 288,
                     "vendorId": 4176
                  }, {
                     "productId": 1025,
                     "vendorId": 4176
                  }, {
                     "productId": 61904,
                     "vendorId": 9601
                  }, {
                     "productId": 61904,
                     "vendorId": 7223
                  }, {
                     "productId": 24579,
                     "vendorId": 1419
                  } ]
               } ],
               "version": "0.8.59"
            },
C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\resources\cryptotoken,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lfgpfhoadcpndoogjiogflmgegfbekec": {
            "active_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.ca/*", "*://www.amazon.co.uk/*", "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.fr/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "granted_permissions": {
               "api": [ "background", "storage", "tabs", "unlimitedStorage" ],
               "explicit_host": [ "*://www.amazon.com/*", "*://www.junglescout.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "*://www.amazon.com/*" ]
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13085794659093473",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {

"author": "http://www.junglescout.com",
               "background": {
                  "persistent": true,
                  "scripts": [ "js/background.js" ]
               },
               "browser_action": {
                  "default_icon": "images/48.png",
                  "default_popup": "popup.html"
               },
               "content_scripts": [ {
                  "css": [ "css/jsPopup.css" ],
                  "js": [ "js/libraries/jquery.js", "js/libraries/enscroll.js", "js/libraries/jquery.tablesorter.js", "js/libraries/table2csv.js", "js/regexer.js", "js/common.js", "js/parser.js", "js/currentState.js", "js/sellerPage.js", "js/storefront.js", "js/jsPopup.js", "js/productPage.js" ],
                  "matches": [ "*://www.amazon.com/*", "*://www.amazon.co.uk/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.ca/*" ],
                  "run_at": "document_start"
               } ],
               "content_security_policy": "script-src 'self' 'unsafe-eval' https://ssl.google-analytics.com;object-src 'self'",
               "description": "Amazon and FBA product research made easy. Extract rank, sales volume, estimated revenue and more without entering the product page.",
               "homepage_url": "http://www.junglescout.com",
               "icons": {
                  "128": "images/128.png",
                  "16": "images/16.png",
                  "48": "images/48.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUizN/5VBQBRBJzP+SuNkk/r2nW1FWU1Q409NTHVEObww/0qoMJQKUl+7gsD3rCbNS41dAmNBwhm9aT/067G5TaOjCbbRQLYWp8Wu5nxIFu+EqMUatHMUbNbxRhY60+Z6lVGvuRJ1bDc+W4JRb90H/Kv34t501LbYlznjqcnFVg3gespi63FA1EYF+zDrYuMlDGitUrSq2Ichfv7k07BLVrL72um6qApoW8sHjD2dhDBZLX1ZojzFBi3yk12KuhMHC9VX5/N+9/wkYHHAkgAkQm+lYkddVq/tDCvSWIc8R3JoA0IAVo0+03C1H/8OyZh2V6wjwoKb0bGRuS6WgVevwIDAQAB",
               "manifest_version": 2,
               "name": "Jungle Scout",
               "permissions": [ "tabs", "background", "storage", "unlimitedStorage", "*://www.amazon.com/*", "*://www.amazon.fr/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*", "*://www.amazon.ca/*", "*://www.junglescout.com/*" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.6.0",
               "web_accessible_resources": [ "*" ]
            },
lfgpfhoadcpndoogjiogflmgegfbekec\3.6.0_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 1,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lifbcibllhkdhoafpjfnlhfpfgnpldfl": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "tabs" ],
               "explicit_host": [ "https://c2c-director...manager.net/*","https://c2c-directory-pre.trafficmanager.net/*", "https://c2c-directory-qa.trafficmanager.net/*", "https://localhost:26143/*", "https://pnrws.skype.com/*" ],
               "manifest_permissions": [  ],
               "scriptable_host": [ "file:///*", "http://*/*", "https://*/*" ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "disable_reasons": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13076431482200707",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "page": "background.html"
               },
               "browser_action": {
                  "default_icon": {
                     "19": "c2c_48x48.png"
                  },
                  "default_popup": "c2c_options_menu.html",
                  "default_title": "Skype Click to Call"
               },
               "content_scripts": [ {
                  "all_frames": true,
                  "css": [ "number_highlighting.css", "number_highlighting_chrome.css" ],
                  "js": [ "jquery-2.1.0.min.js", "mutation-summary.js", "localization.js", "browserSpecificScript.js", "number_highlighting_builder.js", "pnr.js", "fpnr.js", "contentscript.js" ],
                  "matches": [ "http://*/*", "https://*/*", "file://*/*" ],
                  "run_at": "document_end"
               } ],
               "description": "Skype Click to Call",
               "icons": {
                  "128": "c2c_128x128.png",
                  "16": "c2c_16x16.png",
                  "48": "c2c_48x48.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB",
               "manifest_version": 2,
               "name": "Skype Click to Call",
               "permissions": [ "tabs", "https://pnrws.skype.com/","https://c2c-directory-dev.trafficmanager.net/", "https://c2c-directory-pre.trafficmanager.net/", "https://c2c-directory-qa.trafficmanager.net/", "https://localhost:26143/" ],
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "7.4.0.9058",
               "web_accessible_resources": [ "call_skype_logo.png", "call_icon.png", "menu_handler.js", "telemetry.js" ]
            },
lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.4.0.9058_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "lmjegmlicamnimmfhcmpkclmigmmcbeh": {
            "ack_external": true,
            "active_permissions": {
               "api": [ "nativeMessaging", "webConnectable" ],
               "manifest_permissions": [  ]
            },
            "commands": {

            },
            "content_settings": [  ],
            "creation_flags": 9,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": true,
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "initial_keybindings_set": true,
            "install_time": "13059638301654907",
            "lastpingday": "13086255603187116",
            "location": 6,
            "manifest": {
               "background": {
                  "persistent": false,
                  "scripts": [ "background.js" ]
               },
               "description": "Open Drive files directly from your browser in compatible applications installed on your computer.",
               "externally_connectable": {
                  "matches": [ "*://*.google.com/*" ]
               },
               "icons": {
                  "16": "images/drive-sync16.png",
                  "256": "images/drive-sync256.png",
                  "64": "images/drive-sync64.png"
               },
               "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ls4QXUUamoPAlpgJvnpfy2H/54Zsl5mMSrs1zWaIcVqyGRTvzE9d7ekAfJXoPTplwddWd5Kz0QODFPLTxgl+R9wKhrLgeJi6V4Mx8pzDXgxujlQsiHZjikvWEFhMeXssh+W+AbYt9HJnxnYTg3VD2vXc5hO4eApJ8GGIJijMqVSR4YkwttJhxMwuGWyc1WU/b2OsuCsTBOq52HsWZZoZ0iuN51Iu7kBREYMc/QD6p/YFt9WEWzJwC2/G8JoTL+KD9V++tEsMqBOivNfcLAIp04BViC9plYmcNjtYJ9aCGwIQmNKeUHKRado9nHloeKm8m7GZp+JNQNEJDcaiFzewIDAQAB",
               "manifest_version": 2,
               "name": "Application Launcher for Drive (by Google)",
               "permissions": [ "nativeMessaging" ],
               "short_name": "Google Drive App Launcher",
               "update_url": "https://clients2.goo...e/update2/crx",
               "version": "3.2"
            },
lmjegmlicamnimmfhcmpkclmigmmcbeh\3.2_0,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "state": 0,
            "was_installed_by_default": false,
            "was_installed_by_oem": false
         },
         "mfehgcgbbipciphmccgaenjidiccnmng": {
            "active_permissions": {
               "api": [ "cloudPrintPrivate" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852579571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "https://www.google.com/cloudprint"
                  },
                  "urls": [ "https://www.google.c...rome_connector"]
               },
               "description": "Cloud Print",
               "display_in_launcher": false,
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB",
               "name": "Cloud Print",
               "permissions": [ "cloudPrintPrivate" ],
               "version": "0.1"
            },
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\cloud_print,
            "was_installed_by_default": false
         },
         "mgndgikekgjfcpckkfioiadnlibdjbkf": {
            "active_permissions": {
               "api": [  ],
               "manifest_permissions": [  ]
            },
            "app_launcher_ordinal": "n",
            "creation_flags": 1,
            "events": [  ],
            "from_bookmark": false,
            "from_webstore": false,
            "install_time": "13034618852582571",
            "location": 5,
            "manifest": {
               "app": {
                  "launch": {
                     "web_url": "http://THIS-WILL-BE-REPLACED"
                  }
               },
               "description": "Chrome as an app",
               "display_in_launcher": true,
               "display_in_new_tab_page": false,
               "icons": {
                  "128": "product_logo_128.png",
                  "16": "product_logo_16.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB",
               "name": "Chrome",
               "version": "0.1"
            },
            "page_ordinal": "n",
C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\resources\chrome_app No File
CHR Plugin: () - "name": "Google Network Speech",
               "permissions": [ "systemPrivate", "ttsEngine", "https://www.google.com/"],
               "tts_engine": {
                  "voices": [ {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "en-US",
                     "remote": true,
                     "voice_name": "Google US English"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "male",
                     "lang": "en-GB",
                     "remote": true,
                     "voice_name": "Google UK English Male"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "en-GB",
                     "remote": true,
                     "voice_name": "Google UK English Female"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "es-ES",
                     "remote": true,
                     "voice_name": "Google Español"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "fr-FR",
                     "remote": true,
                     "voice_name": "Google Français"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "it-IT",
                     "remote": true,
                     "voice_name": "Google Italiano"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "de-DE",
                     "remote": true,
                     "voice_name": "Google Deutsch"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "ja-JP",
                     "remote": true,
                     "voice_name": "Google æÂ¥æ¬人"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "ko-KR",
                     "remote": true,
                     "voice_name": "Google íÂÂêµ­ìÂÂ"
                  }, {
                     "event_types": [ "start", "end", "error" ],
                     "gender": "female",
                     "lang": "zh-CN",
                     "remote": true,
                     "voice_name": "Google 中å½çÂÂ"
                  } ]
               },
               "version": "1.0"
            },
C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\resources\network_speech_synthesis,
            "preferences": {

            },
            "regular_only_preferences": {

            },
            "was_installed_by_default": false
         },
         "nkeimhogjdpnpccoofpliimaahmaaome": {
            "active_permissions": {
               "api": [ "alarms", "desktopCapture", "processes", "webConnectable", "webrtcAudioPrivate", "webrtcLoggingPrivate", "system.cpu" ],
               "manifest_permissions": [  ]
            },
            "creation_flags": 1,

 

 

 },
               "declarativeWebRequest": {
                  "onRequest": false
               }
            },
            "incognito_content_settings": [  ],
            "incognito_preferences": {

            },
            "install_time": "13072196646501907",
            "lastpingday": "13086255603187116",
            "location": 1,
            "manifest": {
               "app": {
                  "launch": {
                     "container": "tab",
                     "web_url": "https://mail.google.com/mail/ca"
                  },
                  "urls": [ "*://mail.google.com/mail/ca" ]
               },
               "current_locale": "en_US",
               "default_locale": "en",
               "description": "Fast, searchable email with less spam.",
               "icons": {
                  "128": "128.png"
               },
               "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB",
               "manifest_version": 2,
               "name": "Gmail",
               "options_page": "https://mail.google..../ca/#settings",
               "permissions": [ "notifications" ],
               "update_url": "http://clients2.goog...e/update2/crx",
               "version": "8.1"
            },
            "page_ordinal": "n",
pjkljhegncpnkpknbcohdijeoejaedia\8.1_0 No File
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SEOquake) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2014-01-19]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-19]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-19]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-16]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-19]
CHR Extension: (Adblock Plus) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-05-12]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-19]
CHR Extension: (PDF to Word Doc Converter) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjhedcdiaeighcnidfhegnmfieiejmdj [2014-04-16]
CHR Extension: (Zoominto) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnkoafephiilajeompiffeohpcloapob [2015-02-05]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-05]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2014-01-19]
CHR Extension: (DS Amazon Quick View) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkompbllimaoekaogchhkmkdogpkhojg [2015-05-11]
CHR Extension: (AMZ Seller Browser) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\klgpelgeohjghmccooegimcfhanlnngc [2015-07-27]
CHR Extension: (Jungle Scout) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfgpfhoadcpndoogjiogflmgegfbekec [2015-05-12]
CHR Extension: (Skype Click to Call) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-10-27]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-05]
CHR Extension: (RSS Subscription Extension (by Google)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2014-01-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-19]
CHR Extension: (Check All) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbihdpkeohjdfncchjhidbbonnihaob [2014-12-18]
CHR Extension: (SEO Global For Google Search™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi [2014-01-19]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-19]
CHR Extension: (Klip Pal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkoehejbnbinjafeopgalokcmjdgkkhe [2014-10-08]
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - https://clients2.goo...ice/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2765496 2015-07-14] (Microsoft Corporation)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-07-19] (Hewlett-Packard)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-02-14] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S1 {be5bf058-a067-4076-8c2e-22b9345a0260}Gw64; system32\drivers\{be5bf058-a067-4076-8c2e-22b9345a0260}Gw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-09 18:32 - 2015-09-09 18:33 - 00184961 _____ C:\Users\user\Downloads\FRST.txt
2015-09-09 18:32 - 2015-09-09 18:33 - 00000000 ____D C:\FRST
2015-09-09 18:31 - 2015-09-09 18:31 - 02190336 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2015-09-09 18:31 - 2015-09-09 18:31 - 01692160 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2015-09-09 18:02 - 2015-09-09 18:02 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
2015-09-09 09:38 - 2015-09-09 09:38 - 17029456 _____ C:\Users\user\Downloads\DessignPremiumThemes.zip
2015-09-09 09:04 - 2015-09-09 09:04 - 00000077 _____ C:\WINDOWS\setupact.log
2015-09-09 09:04 - 2015-09-09 09:04 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-09 09:02 - 2015-09-09 09:02 - 00000364 _____ C:\WINDOWS\PFRO.log
2015-09-09 08:57 - 2015-09-09 18:24 - 00225791 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-08 21:15 - 2015-08-26 22:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-09-08 21:15 - 2015-08-26 14:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-09-08 21:15 - 2015-08-26 10:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-08 21:15 - 2015-08-26 10:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-09-08 21:15 - 2015-08-26 10:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-08 21:15 - 2015-08-26 10:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-09-08 21:12 - 2015-09-02 22:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-09-08 21:12 - 2015-09-02 22:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-09-08 21:12 - 2015-09-02 14:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-09-08 21:12 - 2015-09-02 13:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-09-08 21:12 - 2015-08-22 14:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-08 21:12 - 2015-08-22 13:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-08 21:12 - 2015-07-30 13:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-09-08 21:12 - 2015-07-30 12:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-09-08 21:12 - 2015-07-22 10:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-09-08 21:12 - 2015-07-22 09:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-09-08 21:12 - 2015-07-17 10:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-09-08 21:12 - 2015-07-17 10:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-09-08 21:12 - 2015-06-27 07:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-09-08 21:11 - 2015-08-22 13:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-08 21:11 - 2015-08-22 13:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-08 21:11 - 2015-08-22 13:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-08 21:11 - 2015-08-22 13:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-09-08 21:11 - 2015-08-22 12:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-08 21:11 - 2015-08-22 12:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-08 21:11 - 2015-08-22 12:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-09-08 21:11 - 2015-08-22 12:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-08 21:11 - 2015-08-22 12:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-09-08 21:11 - 2015-08-22 12:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-09-08 21:11 - 2015-08-22 12:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-09-08 21:11 - 2015-08-22 12:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-09-08 21:11 - 2015-08-22 12:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-09-08 21:11 - 2015-08-22 12:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-08 21:11 - 2015-08-22 12:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-09-08 21:11 - 2015-08-22 12:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-09-08 21:11 - 2015-08-22 12:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-09-08 21:11 - 2015-08-22 12:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-09-08 21:11 - 2015-08-22 12:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-09-08 21:11 - 2015-08-22 12:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-09-08 21:11 - 2015-08-22 11:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-09-08 21:10 - 2015-08-22 12:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-09-08 21:10 - 2015-08-22 12:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-09-08 21:10 - 2015-08-22 11:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-09-08 21:05 - 2015-07-03 17:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-09-08 21:05 - 2015-07-03 10:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-09-08 21:01 - 2015-07-31 23:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-09-08 21:01 - 2015-07-31 23:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-09-08 21:01 - 2015-07-31 23:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-08 21:01 - 2015-07-31 23:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-09-08 21:01 - 2015-07-31 23:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-09-08 21:01 - 2015-07-22 10:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-08 21:01 - 2015-07-22 10:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-08 21:01 - 2015-07-22 10:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-08 21:01 - 2015-07-22 10:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-08 21:01 - 2015-07-18 14:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-08 21:01 - 2015-07-18 14:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-08 21:01 - 2015-07-18 14:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-08 21:01 - 2015-07-18 14:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-08 21:01 - 2015-07-13 23:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-09-08 21:01 - 2015-07-13 15:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-09-08 21:01 - 2015-07-09 12:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-09-08 21:01 - 2015-06-19 13:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-09-08 21:00 - 2015-09-01 22:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-09-08 21:00 - 2015-09-01 22:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-08 21:00 - 2015-09-01 22:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-08 21:00 - 2015-09-01 22:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-08 21:00 - 2015-09-01 22:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-08 21:00 - 2015-08-03 17:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-09-08 21:00 - 2015-08-03 17:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-09-08 21:00 - 2015-08-01 10:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-09-08 20:25 - 2015-09-08 20:27 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-08 20:25 - 2015-09-08 20:25 - 00001076 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-08 20:25 - 2015-09-08 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-08 20:25 - 2015-09-08 20:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-08 20:25 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-09-08 20:25 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-08 18:02 - 2015-09-08 18:06 - 00000000 ____D C:\AdwCleaner
2015-09-08 17:38 - 2015-09-08 17:39 - 01660416 _____ C:\Users\user\Downloads\adwcleaner_5.007.exe
2015-08-31 22:36 - 2015-08-31 22:36 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-30 20:19 - 2015-09-02 18:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-29 11:35 - 2015-08-29 11:46 - 115188949 _____ C:\Users\UdaGuest\Downloads\brax 4-15.mp4
2015-08-29 11:27 - 2015-08-29 11:35 - 140755539 _____ C:\Users\UdaGuest\Downloads\brax 4-14.mp4
2015-08-29 11:27 - 2015-08-29 11:33 - 103772444 _____ C:\Users\UdaGuest\Downloads\brax 4-13.mp4
2015-08-29 11:26 - 2015-08-29 11:46 - 137877135 _____ C:\Users\UdaGuest\Downloads\brax 4-12.flv
2015-08-29 11:17 - 2015-08-29 11:20 - 00000178 _____ C:\Users\UdaGuest\Downloads\Brax 4-12.mp4
2015-08-29 11:15 - 2015-08-29 11:20 - 95794223 _____ C:\Users\UdaGuest\Downloads\brax 4-11.mp4
2015-08-28 20:37 - 2015-08-28 20:42 - 253824414 _____ C:\Users\UdaGuest\Downloads\hoc 3-7.mp4
2015-08-28 20:31 - 2015-08-28 20:37 - 248931962 _____ C:\Users\UdaGuest\Downloads\hoc 3-5.mp4
2015-08-28 20:00 - 2015-08-28 20:05 - 401291529 _____ C:\Users\UdaGuest\Downloads\HOFC 3-11.mp4
2015-08-28 19:52 - 2015-08-28 19:59 - 354119302 _____ C:\Users\UdaGuest\Downloads\HOFC  3-12.mp4
2015-08-28 13:18 - 2015-08-28 13:44 - 210594894 _____ C:\Users\UdaGuest\Downloads\hoc 3-8.mp4
2015-08-28 13:13 - 2015-08-28 13:44 - 257854907 _____ C:\Users\UdaGuest\Downloads\hoc 3-6.mp4
2015-08-27 22:42 - 2015-08-27 23:12 - 117914219 _____ C:\Users\UdaGuest\Downloads\hoc 3-4.mp4
2015-08-27 22:41 - 2015-08-27 23:18 - 179641619 _____ C:\Users\UdaGuest\Downloads\hoc 3-3.mp4
2015-08-27 22:03 - 2015-08-27 22:30 - 258111970 _____ C:\Users\UdaGuest\Downloads\hoc 3-2.mp4
2015-08-27 21:59 - 2015-08-27 22:27 - 280440392 _____ C:\Users\UdaGuest\Downloads\hoc 3-1.mp4
2015-08-26 10:37 - 2015-08-26 10:44 - 00010230 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1 (1)4.txt
2015-08-25 19:17 - 2015-08-25 19:17 - 00000000 ____D C:\Users\UdaGuest\AppData\Roaming\Sun
2015-08-25 19:17 - 2015-08-25 19:17 - 00000000 ____D C:\Users\UdaGuest\.oracle_jre_usage
2015-08-25 19:16 - 2015-08-25 19:16 - 00000000 ____D C:\Users\user\AppData\Roaming\Sun
2015-08-25 19:16 - 2015-08-25 19:16 - 00000000 ____D C:\Users\user\.oracle_jre_usage
2015-08-25 17:37 - 2015-08-25 17:38 - 00026806 _____ C:\Users\user\Desktop\176725221016672.xlsx
2015-08-25 17:25 - 2015-08-25 17:25 - 00706560 _____ C:\Users\user\Desktop\ca_grocery_browse_tree_guide._TTH_.xls
2015-08-25 10:54 - 2015-08-26 10:37 - 04919296 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1 (1).xls
2015-08-25 10:51 - 2015-08-26 10:10 - 05009408 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1.xls
2015-08-25 10:39 - 2015-08-25 15:16 - 05001728 _____ C:\Users\user\Desktop\Flat.File.FoodAndBeverages.ca1.xls
2015-08-25 09:44 - 2015-08-25 09:45 - 04974592 _____ C:\Users\user\Desktop\Flat.File.FoodAndBeverages.ca.xls
2015-08-24 14:10 - 2015-08-24 14:10 - 00002713 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-24 14:10 - 2015-08-24 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-23 23:44 - 2015-08-24 00:16 - 183612030 _____ C:\Users\UdaGuest\Downloads\ty 2-9.mp4
2015-08-23 23:35 - 2015-08-24 00:10 - 149009163 _____ C:\Users\UdaGuest\Downloads\ty 2-8.mp4
2015-08-18 21:39 - 2015-08-18 21:39 - 00310890 _____ C:\Users\user\Desktop\match44-Recovered.psd
2015-08-18 20:25 - 2015-09-09 11:06 - 00000000 ____D C:\Users\user\Desktop\MATCHA STUFF
2015-08-12 09:34 - 2015-09-08 19:17 - 00000000 ____D C:\Users\user\Desktop\resume
2015-08-11 20:06 - 2015-07-30 10:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 20:06 - 2015-07-30 09:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 17:47 - 2015-07-16 16:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-11 17:47 - 2015-07-16 16:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-11 17:47 - 2015-07-16 15:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-11 17:47 - 2015-07-16 15:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-11 17:47 - 2015-07-16 15:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-11 17:47 - 2015-07-16 15:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-11 17:47 - 2015-07-16 14:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-11 17:46 - 2015-07-28 19:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-11 17:46 - 2015-07-28 10:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-08-11 17:46 - 2015-07-15 20:29 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-11 17:46 - 2015-07-15 20:29 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-11 17:46 - 2015-07-15 20:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-11 17:46 - 2015-07-15 20:28 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-11 17:46 - 2015-07-10 13:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-11 17:46 - 2015-07-07 05:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-11 17:46 - 2015-07-07 05:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-11 17:46 - 2015-07-07 05:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-11 17:46 - 2015-07-01 18:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-11 17:46 - 2015-07-01 18:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-11 17:46 - 2015-07-01 17:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-11 17:46 - 2015-07-01 17:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-11 17:46 - 2015-06-12 13:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-11 17:46 - 2015-06-12 12:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-11 17:41 - 2015-07-13 15:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-11 17:41 - 2015-07-13 15:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-11 17:40 - 2015-07-29 10:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-11 17:40 - 2015-07-29 10:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-11 17:40 - 2015-07-29 10:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-11 17:40 - 2015-07-14 17:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-11 17:40 - 2015-07-14 17:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-11 17:40 - 2015-07-14 17:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-11 17:40 - 2015-07-10 14:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-11 17:40 - 2015-07-10 13:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-11 17:40 - 2015-07-10 13:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-11 17:40 - 2015-07-10 12:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-11 17:40 - 2015-07-09 13:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-11 17:40 - 2015-07-09 13:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-11 17:40 - 2015-07-09 12:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-11 17:40 - 2015-06-11 16:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-11 17:40 - 2015-06-11 16:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-11 17:40 - 2015-05-11 20:24 - 00536920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-09 18:19 - 2014-06-22 13:08 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job
2015-09-09 18:12 - 2014-10-26 16:33 - 00000000 ____D C:\Users\user\AppData\Roaming\Skype
2015-09-09 18:10 - 2014-01-22 13:15 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-09 18:08 - 2015-06-19 21:30 - 00000928 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job
2015-09-09 18:05 - 2014-01-19 11:20 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-09 17:02 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-09 16:54 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-09 15:19 - 2014-06-22 13:08 - 00000866 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job
2015-09-09 12:36 - 2014-08-17 12:36 - 00000276 _____ C:\WINDOWS\Tasks\AutoKMS.job
2015-09-09 12:35 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\rescache
2015-09-09 09:15 - 2014-02-03 18:50 - 06790144 ___SH C:\Users\user\Desktop\Thumbs.db
2015-09-09 09:14 - 2014-09-13 18:22 - 00000000 ___RD C:\Users\user\Google Drive
2015-09-09 09:14 - 2014-07-29 11:39 - 00000000 ___RD C:\Users\user\Dropbox
2015-09-09 09:14 - 2014-07-29 11:33 - 00000000 ____D C:\Users\user\AppData\Roaming\Dropbox
2015-09-09 09:11 - 2014-04-15 21:44 - 00000000 __RDO C:\Users\user\SkyDrive
2015-09-09 09:09 - 2013-11-14 03:28 - 00006428 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-09 09:07 - 2012-09-01 00:56 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-09-09 09:04 - 2013-08-22 10:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-09 09:04 - 2013-08-22 10:44 - 05255744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-09 09:01 - 2013-11-14 03:17 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-09-09 08:52 - 2015-08-04 18:42 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-09 08:42 - 2013-05-03 03:01 - 00003914 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8ED3D9D8-B8AA-47EC-892B-9891ACE69748}
2015-09-09 08:26 - 2014-01-22 13:13 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2015-09-08 21:56 - 2012-07-26 03:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-08 20:30 - 2013-12-25 07:32 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-780537518-3874126668-2360522559-1001
2015-09-08 20:25 - 2014-02-18 12:25 - 00000000 ____D C:\Users\user\AppData\Roaming\Malwarebytes
2015-09-08 20:25 - 2014-02-18 12:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-08 20:25 - 2014-02-18 12:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-09-08 19:16 - 2013-05-03 02:59 - 00000000 ____D C:\Users\user\AppData\Local\Packages
2015-09-08 18:07 - 2014-01-28 12:40 - 00000000 ____D C:\WINDOWS\system32\log
2015-09-08 17:56 - 2014-01-25 20:40 - 01166336 ___SH C:\Users\user\Downloads\Thumbs.db
2015-09-08 16:48 - 2015-01-17 11:06 - 00000000 ____D C:\Users\user\Desktop\amazonpic
2015-09-08 15:32 - 2014-02-05 22:46 - 02394624 ___SH C:\Users\user\Documents\Thumbs.db
2015-09-07 01:08 - 2015-06-19 21:30 - 00000876 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job
2015-09-06 16:32 - 2014-12-27 20:44 - 00000000 ____D C:\Users\UdaGuest
2015-09-06 09:49 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-02 18:22 - 2014-01-19 11:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-02 00:51 - 2015-08-09 16:09 - 15658281 _____ C:\Users\user\Desktop\matcha 6.pptx
2015-08-30 21:04 - 2015-01-06 01:34 - 00435200 ___SH C:\Users\UdaGuest\Downloads\Thumbs.db
2015-08-30 19:59 - 2014-12-27 20:51 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-780537518-3874126668-2360522559-1006
2015-08-30 19:45 - 2015-01-20 15:35 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{57B6A091-2E55-4B68-A4AB-596F3897DAFE}
2015-08-25 19:17 - 2014-05-13 20:42 - 00000000 ____D C:\ProgramData\Oracle
2015-08-25 19:16 - 2014-07-23 11:28 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-08-25 19:16 - 2014-07-23 11:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-25 19:15 - 2014-05-13 20:41 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-25 19:12 - 2015-08-01 23:14 - 00584288 _____ (Oracle Corporation) C:\Users\UdaGuest\Downloads\jxpiinstall.exe
2015-08-25 09:39 - 2014-10-01 15:52 - 00000176 _____ C:\Users\user\AppData\Roaming\WB.CFG
2015-08-25 09:01 - 2015-03-26 22:53 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-08-24 14:30 - 2015-07-08 19:34 - 00004962 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for USERPC-user userpc
2015-08-24 14:10 - 2014-10-26 16:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-24 14:10 - 2014-10-26 16:32 - 00000000 ____D C:\ProgramData\Skype
2015-08-20 10:34 - 2014-06-07 16:45 - 00003090 _____ C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-780537518-3874126668-2360522559-1001
2015-08-20 10:34 - 2014-06-07 16:45 - 00000000 ___RD C:\Users\user\OneDrive
2015-08-15 03:11 - 2014-12-27 20:45 - 00000000 ____D C:\Users\UdaGuest\AppData\Local\Packages
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieUserList
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieSiteList
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieBrowserModeList
2015-08-12 09:22 - 2014-12-12 16:41 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-12 09:22 - 2014-07-11 01:15 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-11 20:06 - 2015-07-12 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-11 20:03 - 2015-07-12 20:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-11 20:03 - 2015-07-12 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-11 20:01 - 2014-01-22 04:09 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-11 19:23 - 2014-01-22 04:09 - 132483416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-11 19:20 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 19:20 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 18:11 - 2014-01-22 13:15 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2014-02-20 18:55 - 2014-02-20 18:55 - 0000132 _____ () C:\Users\user\AppData\Roaming\Adobe PNG Format CC Prefs
2014-09-10 15:10 - 2015-08-09 18:39 - 0000132 _____ () C:\Users\user\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-12-21 21:12 - 2015-04-03 16:56 - 0000033 _____ () C:\Users\user\AppData\Roaming\AdobeWLCMCache.dat
2014-10-01 15:52 - 2015-08-25 09:39 - 0000176 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2014-09-13 22:19 - 2014-12-23 16:09 - 0001456 _____ () C:\Users\user\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-06-25 17:02 - 2014-08-23 00:32 - 0008192 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-10 15:39 - 2015-04-05 01:39 - 0000010 _____ () C:\Users\user\AppData\Local\DSI.DAT
2014-12-17 14:39 - 2014-12-17 14:39 - 0022528 _____ () C:\Users\user\AppData\Local\dsisetup18042342.exe
2014-12-01 19:39 - 2014-12-01 19:39 - 0022528 _____ () C:\Users\user\AppData\Local\dsisetup3412086872.exe
2014-06-25 17:29 - 2014-06-25 17:29 - 0004096 ____H () C:\Users\user\AppData\Local\keyfile3.drm
2012-09-01 02:08 - 2012-09-01 02:08 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Some files in TEMP:
====================
C:\Users\user\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp2_1c2o.dll
C:\Users\user\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-09 10:36

==================== End of FRST.txt ============================


  • 0

Advertisements


#11
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Please do not quote the replies. Just scroll down, on the bottom you will find a window where you can simply paste the answer.

I see that Chrome settings are listed strangely. Before we move on could you please do the following:



chrome.png Reset Chrome to defaults

Please open Google Chrome.

  • Enter the Chrome menu by clicking the chrome-menu.png button.
  • Select Settings.
  • Click Show advanced settings and find the Reset browser settings section.
  • Click Reset browser settings.
  • In the dialog that appears, click Reset.
  • Chrome will reset itself.
Bare in mind that all your browsing history, passwords, cookies will be saved. This procedure will only remove all extensions, themes, plugins etc. and restore Chrome engine to a state similar after a fresh installation.


After that please Uninstall Chrome and do not reinstall (switch to Internet Explorer temporarily if necessary).


Then please re-run FRST as follows.



FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.
  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    > XP users click run after receipt of Windows Security Warning - Open File.
    > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content in your next reply.

 

thank you for your help i will do that , I am sorry , I have never used forum before


  • 0

#12
Naathim

Naathim

    GeekU Minion

  • Expert
  • 4,568 posts
I understand. Please follow my guidelines and hopefully I will be able to help you.

Please do not quote the replies. Just scroll down, on the bottom you will find a window where you can simply paste the answer.
  • 0

#13
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

 

Please do not quote the replies. Just scroll down, on the bottom you will find a window where you can simply paste the answer.

I see that Chrome settings are listed strangely. Before we move on could you please do the following:



chrome.png Reset Chrome to defaults

Please open Google Chrome.

  • Enter the Chrome menu by clicking the chrome-menu.png button.
  • Select Settings.
  • Click Show advanced settings and find the Reset browser settings section.
  • Click Reset browser settings.
  • In the dialog that appears, click Reset.
  • Chrome will reset itself.
Bare in mind that all your browsing history, passwords, cookies will be saved. This procedure will only remove all extensions, themes, plugins etc. and restore Chrome engine to a state similar after a fresh installation.


After that please Uninstall Chrome and do not reinstall (switch to Internet Explorer temporarily if necessary).


Then please re-run FRST as follows.



FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.
  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    > XP users click run after receipt of Windows Security Warning - Open File.
    > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content in your next reply.

 

thank you for your help i will do that , I am sorry , I have never used forum before

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01
Ran by user (administrator) on USERPC (10-09-2015 14:57:00)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & UdaGuest)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\System32\atieclxx.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\lync.exe
(© 2015 Microsoft Corporation) C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-02] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [msnmsgr] => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Google Update] => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office 15\root\office15\lync.exe [24055464 2015-07-14] (Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Dropbox Update] => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs-x32: c:\windows\jaksta\ac\x86\jaudcap.dll => c:\windows\jaksta\ac\x86\jaudcap.dll [264480 2014-05-06] (Jaksta Technologies Pty Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-02-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-02-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-07-12]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-03-26]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1    mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{462105B1-AF78-47E3-AC0D-109F28027A93}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{9B004C7D-7A34-4A9C-BEDB-5212A582FAB1}: [DhcpNameServer] 207.164.234.193 207.164.234.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=en-US&Src=WD8&Tid=000328B0&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {2EA88067-FD29-4F4E-B8B3-DE89F523C107} URL = hxxps://ca.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {8E0E081D-FD81-46C2-AD92-3B939C17F151} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-780537518-3874126668-2360522559-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-06-29] (IvoSoft)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-06-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-25] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-06-29] (IvoSoft)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-06-29] (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-26] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default
FF NewTab: resource://jid1-g80ec8llebk5fq-at-jetpack/newtab/data/newtab.html
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @citrixonline.com/appdetectorplugin -> C:\Users\user\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-05-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-780537518-3874126668-2360522559-1001: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-22] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-22] (Google)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-07]
FF Extension: Amazon Price Tracker - Keepa.com - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2015-01-22]
FF Extension: Strict Pop-up Blocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\[email protected] [2014-10-16]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\lir62497.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6779\ff
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home7120\ff

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.goo...ice/update2/crx
CHR HKU\S-1-5-21-780537518-3874126668-2360522559-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - https://clients2.goo...ice/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.goo...ice/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2765496 2015-07-14] (Microsoft Corporation)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-07-19] (Hewlett-Packard)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-02-14] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S1 {be5bf058-a067-4076-8c2e-22b9345a0260}Gw64; system32\drivers\{be5bf058-a067-4076-8c2e-22b9345a0260}Gw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-10 13:03 - 2015-09-10 13:03 - 00001055 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2015-09-10 13:03 - 2015-09-10 13:03 - 00000000 ____D C:\Users\user\AppData\Local\VS Revo Group
2015-09-10 13:03 - 2015-09-10 13:03 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-09-10 13:03 - 2015-09-10 13:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-09-10 13:03 - 2015-09-10 13:03 - 00000000 ____D C:\Program Files\VS Revo Group
2015-09-10 13:03 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2015-09-10 12:54 - 2015-09-10 12:55 - 11069616 _____ (VS Revo Group ) C:\Users\user\Downloads\RevoUninProSetup.exe
2015-09-10 12:08 - 2015-09-10 12:08 - 00069421 _____ C:\Users\user\Desktop\bookmarks_9_10_15.html
2015-09-09 20:51 - 2015-09-09 20:51 - 00052331 _____ C:\Users\user\Desktop\Addition1.txt
2015-09-09 20:50 - 2015-09-09 20:50 - 00214717 _____ C:\Users\user\Desktop\FRST1.txt
2015-09-09 18:34 - 2015-09-09 18:35 - 00052331 _____ C:\Users\user\Downloads\Addition.txt
2015-09-09 18:32 - 2015-09-10 14:57 - 00026334 _____ C:\Users\user\Downloads\FRST.txt
2015-09-09 18:32 - 2015-09-10 14:57 - 00000000 ____D C:\FRST
2015-09-09 18:31 - 2015-09-09 18:31 - 02190336 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2015-09-09 18:31 - 2015-09-09 18:31 - 01692160 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2015-09-09 18:02 - 2015-09-09 18:02 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\user\Downloads\tdsskiller.exe
2015-09-09 09:38 - 2015-09-09 09:38 - 17029456 _____ C:\Users\user\Downloads\DessignPremiumThemes.zip
2015-09-09 09:04 - 2015-09-10 11:41 - 00000231 _____ C:\WINDOWS\setupact.log
2015-09-09 09:04 - 2015-09-09 09:04 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-09 09:02 - 2015-09-09 09:02 - 00000364 _____ C:\WINDOWS\PFRO.log
2015-09-09 08:57 - 2015-09-10 14:56 - 00553471 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-08 21:15 - 2015-08-26 22:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-09-08 21:15 - 2015-08-26 14:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-09-08 21:15 - 2015-08-26 14:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-09-08 21:15 - 2015-08-26 10:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-08 21:15 - 2015-08-26 10:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-09-08 21:15 - 2015-08-26 10:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-08 21:15 - 2015-08-26 10:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-09-08 21:15 - 2015-08-26 10:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-09-08 21:12 - 2015-09-02 22:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-09-08 21:12 - 2015-09-02 22:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-09-08 21:12 - 2015-09-02 14:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-09-08 21:12 - 2015-09-02 13:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-09-08 21:12 - 2015-08-22 14:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-08 21:12 - 2015-08-22 13:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-08 21:12 - 2015-07-30 13:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-09-08 21:12 - 2015-07-30 12:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-09-08 21:12 - 2015-07-22 10:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-09-08 21:12 - 2015-07-22 09:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-09-08 21:12 - 2015-07-17 10:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-09-08 21:12 - 2015-07-17 10:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-09-08 21:12 - 2015-06-27 07:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-09-08 21:11 - 2015-08-22 13:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-08 21:11 - 2015-08-22 13:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-08 21:11 - 2015-08-22 13:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-08 21:11 - 2015-08-22 13:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-09-08 21:11 - 2015-08-22 12:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-08 21:11 - 2015-08-22 12:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-08 21:11 - 2015-08-22 12:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-09-08 21:11 - 2015-08-22 12:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-08 21:11 - 2015-08-22 12:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-09-08 21:11 - 2015-08-22 12:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-09-08 21:11 - 2015-08-22 12:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-09-08 21:11 - 2015-08-22 12:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-09-08 21:11 - 2015-08-22 12:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-09-08 21:11 - 2015-08-22 12:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-09-08 21:11 - 2015-08-22 12:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-08 21:11 - 2015-08-22 12:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-09-08 21:11 - 2015-08-22 12:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-09-08 21:11 - 2015-08-22 12:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-09-08 21:11 - 2015-08-22 12:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-09-08 21:11 - 2015-08-22 12:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-09-08 21:11 - 2015-08-22 12:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-09-08 21:11 - 2015-08-22 11:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-09-08 21:10 - 2015-08-22 12:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-09-08 21:10 - 2015-08-22 12:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-09-08 21:10 - 2015-08-22 11:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-09-08 21:05 - 2015-07-03 17:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-09-08 21:05 - 2015-07-03 10:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-09-08 21:01 - 2015-07-31 23:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-09-08 21:01 - 2015-07-31 23:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-09-08 21:01 - 2015-07-31 23:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-08 21:01 - 2015-07-31 23:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-09-08 21:01 - 2015-07-31 23:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-09-08 21:01 - 2015-07-22 10:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-08 21:01 - 2015-07-22 10:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-08 21:01 - 2015-07-22 10:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-08 21:01 - 2015-07-22 10:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-08 21:01 - 2015-07-18 14:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-08 21:01 - 2015-07-18 14:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-08 21:01 - 2015-07-18 14:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-08 21:01 - 2015-07-18 14:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-08 21:01 - 2015-07-13 23:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-09-08 21:01 - 2015-07-13 15:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-09-08 21:01 - 2015-07-09 12:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-09-08 21:01 - 2015-06-19 13:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-09-08 21:00 - 2015-09-01 22:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-09-08 21:00 - 2015-09-01 22:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-08 21:00 - 2015-09-01 22:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-08 21:00 - 2015-09-01 22:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-08 21:00 - 2015-09-01 22:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-08 21:00 - 2015-08-03 17:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-09-08 21:00 - 2015-08-03 17:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-09-08 21:00 - 2015-08-01 10:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-09-08 20:25 - 2015-09-08 20:27 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-08 20:25 - 2015-09-08 20:25 - 00001076 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-08 20:25 - 2015-09-08 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-08 20:25 - 2015-09-08 20:25 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-08 20:25 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-09-08 20:25 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-08 18:02 - 2015-09-08 18:06 - 00000000 ____D C:\AdwCleaner
2015-09-08 17:38 - 2015-09-08 17:39 - 01660416 _____ C:\Users\user\Downloads\adwcleaner_5.007.exe
2015-08-31 22:36 - 2015-08-31 22:36 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-30 20:19 - 2015-09-02 18:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-29 11:35 - 2015-08-29 11:46 - 115188949 _____ C:\Users\UdaGuest\Downloads\brax 4-15.mp4
2015-08-29 11:27 - 2015-08-29 11:35 - 140755539 _____ C:\Users\UdaGuest\Downloads\brax 4-14.mp4
2015-08-29 11:27 - 2015-08-29 11:33 - 103772444 _____ C:\Users\UdaGuest\Downloads\brax 4-13.mp4
2015-08-29 11:26 - 2015-08-29 11:46 - 137877135 _____ C:\Users\UdaGuest\Downloads\brax 4-12.flv
2015-08-29 11:17 - 2015-08-29 11:20 - 00000178 _____ C:\Users\UdaGuest\Downloads\Brax 4-12.mp4
2015-08-29 11:15 - 2015-08-29 11:20 - 95794223 _____ C:\Users\UdaGuest\Downloads\brax 4-11.mp4
2015-08-28 20:37 - 2015-08-28 20:42 - 253824414 _____ C:\Users\UdaGuest\Downloads\hoc 3-7.mp4
2015-08-28 20:31 - 2015-08-28 20:37 - 248931962 _____ C:\Users\UdaGuest\Downloads\hoc 3-5.mp4
2015-08-28 20:00 - 2015-08-28 20:05 - 401291529 _____ C:\Users\UdaGuest\Downloads\HOFC 3-11.mp4
2015-08-28 19:52 - 2015-08-28 19:59 - 354119302 _____ C:\Users\UdaGuest\Downloads\HOFC  3-12.mp4
2015-08-28 13:18 - 2015-08-28 13:44 - 210594894 _____ C:\Users\UdaGuest\Downloads\hoc 3-8.mp4
2015-08-28 13:13 - 2015-08-28 13:44 - 257854907 _____ C:\Users\UdaGuest\Downloads\hoc 3-6.mp4
2015-08-27 22:42 - 2015-08-27 23:12 - 117914219 _____ C:\Users\UdaGuest\Downloads\hoc 3-4.mp4
2015-08-27 22:41 - 2015-08-27 23:18 - 179641619 _____ C:\Users\UdaGuest\Downloads\hoc 3-3.mp4
2015-08-27 22:03 - 2015-08-27 22:30 - 258111970 _____ C:\Users\UdaGuest\Downloads\hoc 3-2.mp4
2015-08-27 21:59 - 2015-08-27 22:27 - 280440392 _____ C:\Users\UdaGuest\Downloads\hoc 3-1.mp4
2015-08-26 10:37 - 2015-08-26 10:44 - 00010230 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1 (1)4.txt
2015-08-25 19:17 - 2015-08-25 19:17 - 00000000 ____D C:\Users\UdaGuest\AppData\Roaming\Sun
2015-08-25 19:17 - 2015-08-25 19:17 - 00000000 ____D C:\Users\UdaGuest\.oracle_jre_usage
2015-08-25 19:16 - 2015-08-25 19:16 - 00000000 ____D C:\Users\user\AppData\Roaming\Sun
2015-08-25 19:16 - 2015-08-25 19:16 - 00000000 ____D C:\Users\user\.oracle_jre_usage
2015-08-25 17:37 - 2015-08-25 17:38 - 00026806 _____ C:\Users\user\Desktop\176725221016672.xlsx
2015-08-25 17:25 - 2015-08-25 17:25 - 00706560 _____ C:\Users\user\Desktop\ca_grocery_browse_tree_guide._TTH_.xls
2015-08-25 10:54 - 2015-08-26 10:37 - 04919296 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1 (1).xls
2015-08-25 10:51 - 2015-08-26 10:10 - 05009408 _____ C:\Users\user\Desktop\CORRECTEDFlat.File.FoodAndBeverages.ca1.xls
2015-08-25 10:39 - 2015-08-25 15:16 - 05001728 _____ C:\Users\user\Desktop\Flat.File.FoodAndBeverages.ca1.xls
2015-08-25 09:44 - 2015-08-25 09:45 - 04974592 _____ C:\Users\user\Desktop\Flat.File.FoodAndBeverages.ca.xls
2015-08-24 14:10 - 2015-08-24 14:10 - 00002713 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-24 14:10 - 2015-08-24 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-23 23:44 - 2015-08-24 00:16 - 183612030 _____ C:\Users\UdaGuest\Downloads\ty 2-9.mp4
2015-08-23 23:35 - 2015-08-24 00:10 - 149009163 _____ C:\Users\UdaGuest\Downloads\ty 2-8.mp4
2015-08-18 21:39 - 2015-08-18 21:39 - 00310890 _____ C:\Users\user\Desktop\match44-Recovered.psd
2015-08-18 20:25 - 2015-09-09 11:06 - 00000000 ____D C:\Users\user\Desktop\MATCHA STUFF
2015-08-12 09:34 - 2015-09-08 19:17 - 00000000 ____D C:\Users\user\Desktop\resume
2015-08-11 20:06 - 2015-07-30 10:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 20:06 - 2015-07-30 09:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 17:47 - 2015-07-16 16:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-11 17:47 - 2015-07-16 16:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-11 17:47 - 2015-07-16 15:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-11 17:47 - 2015-07-16 15:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-11 17:47 - 2015-07-16 15:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-11 17:47 - 2015-07-16 15:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-11 17:47 - 2015-07-16 14:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-11 17:46 - 2015-07-28 19:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-11 17:46 - 2015-07-28 10:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-08-11 17:46 - 2015-07-28 10:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-08-11 17:46 - 2015-07-15 20:29 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-11 17:46 - 2015-07-15 20:29 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-11 17:46 - 2015-07-15 20:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-11 17:46 - 2015-07-15 20:28 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-11 17:46 - 2015-07-10 13:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-11 17:46 - 2015-07-07 05:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-11 17:46 - 2015-07-07 05:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-11 17:46 - 2015-07-07 05:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-11 17:46 - 2015-07-01 18:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-11 17:46 - 2015-07-01 18:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-11 17:46 - 2015-07-01 17:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-11 17:46 - 2015-07-01 17:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-11 17:46 - 2015-06-12 13:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-11 17:46 - 2015-06-12 12:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-11 17:41 - 2015-07-13 15:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-11 17:41 - 2015-07-13 15:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-11 17:40 - 2015-07-29 10:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-11 17:40 - 2015-07-29 10:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-11 17:40 - 2015-07-29 10:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-11 17:40 - 2015-07-14 17:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-11 17:40 - 2015-07-14 17:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-11 17:40 - 2015-07-14 17:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-11 17:40 - 2015-07-10 14:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-11 17:40 - 2015-07-10 13:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-11 17:40 - 2015-07-10 13:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-11 17:40 - 2015-07-10 12:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-11 17:40 - 2015-07-09 13:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-11 17:40 - 2015-07-09 13:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-11 17:40 - 2015-07-09 12:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-11 17:40 - 2015-06-11 16:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-11 17:40 - 2015-06-11 16:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-11 17:40 - 2015-05-11 20:24 - 00536920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-10 14:34 - 2014-07-29 11:39 - 00000000 ___RD C:\Users\user\Dropbox
2015-09-10 14:34 - 2014-07-29 11:33 - 00000000 ____D C:\Users\user\AppData\Roaming\Dropbox
2015-09-10 14:33 - 2014-10-26 16:33 - 00000000 ____D C:\Users\user\AppData\Roaming\Skype
2015-09-10 14:32 - 2014-09-13 18:22 - 00000000 ___RD C:\Users\user\Google Drive
2015-09-10 14:32 - 2014-04-15 21:44 - 00000000 __RDO C:\Users\user\SkyDrive
2015-09-10 14:27 - 2014-01-19 11:20 - 00000000 ____D C:\Users\user\AppData\Local\Google
2015-09-10 14:19 - 2014-06-22 13:08 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job
2015-09-10 14:10 - 2014-01-22 13:15 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-10 14:08 - 2015-06-19 21:30 - 00000928 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job
2015-09-10 14:02 - 2013-12-25 07:32 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-780537518-3874126668-2360522559-1001
2015-09-10 14:00 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-10 13:07 - 2013-05-03 03:01 - 00003914 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8ED3D9D8-B8AA-47EC-892B-9891ACE69748}
2015-09-10 13:03 - 2014-02-03 18:50 - 06810624 ___SH C:\Users\user\Desktop\Thumbs.db
2015-09-10 12:36 - 2014-08-17 12:36 - 00000276 _____ C:\WINDOWS\Tasks\AutoKMS.job
2015-09-10 11:48 - 2013-11-14 03:28 - 00006428 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-10 11:45 - 2012-09-01 00:56 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-09-10 11:41 - 2013-08-22 10:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-10 11:33 - 2014-11-16 21:49 - 00000000 __SHD C:\Users\user\AppData\Local\EmieBrowserModeList
2015-09-10 11:33 - 2014-04-21 19:47 - 00000000 __SHD C:\Users\user\AppData\Local\EmieUserList
2015-09-10 11:33 - 2014-04-21 19:47 - 00000000 __SHD C:\Users\user\AppData\Local\EmieSiteList
2015-09-10 10:30 - 2014-01-22 13:13 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2015-09-09 16:54 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-09 15:19 - 2014-06-22 13:08 - 00000866 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job
2015-09-09 12:35 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\rescache
2015-09-09 09:04 - 2013-08-22 10:44 - 05255744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-09 09:01 - 2013-11-14 03:17 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-09-09 09:01 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-09-09 08:52 - 2015-08-04 18:42 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-08 21:56 - 2012-07-26 03:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-08 20:25 - 2014-02-18 12:25 - 00000000 ____D C:\Users\user\AppData\Roaming\Malwarebytes
2015-09-08 20:25 - 2014-02-18 12:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-08 20:25 - 2014-02-18 12:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-09-08 19:16 - 2013-05-03 02:59 - 00000000 ____D C:\Users\user\AppData\Local\Packages
2015-09-08 18:07 - 2014-01-28 12:40 - 00000000 ____D C:\WINDOWS\system32\log
2015-09-08 17:56 - 2014-01-25 20:40 - 01166336 ___SH C:\Users\user\Downloads\Thumbs.db
2015-09-08 16:48 - 2015-01-17 11:06 - 00000000 ____D C:\Users\user\Desktop\amazonpic
2015-09-08 15:32 - 2014-02-05 22:46 - 02394624 ___SH C:\Users\user\Documents\Thumbs.db
2015-09-07 01:08 - 2015-06-19 21:30 - 00000876 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job
2015-09-06 16:32 - 2014-12-27 20:44 - 00000000 ____D C:\Users\UdaGuest
2015-09-06 09:49 - 2013-08-22 11:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-02 18:22 - 2014-01-19 11:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-02 00:51 - 2015-08-09 16:09 - 15658281 _____ C:\Users\user\Desktop\matcha 6.pptx
2015-08-30 21:04 - 2015-01-06 01:34 - 00435200 ___SH C:\Users\UdaGuest\Downloads\Thumbs.db
2015-08-30 19:59 - 2014-12-27 20:51 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-780537518-3874126668-2360522559-1006
2015-08-30 19:45 - 2015-01-20 15:35 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{57B6A091-2E55-4B68-A4AB-596F3897DAFE}
2015-08-25 19:17 - 2014-05-13 20:42 - 00000000 ____D C:\ProgramData\Oracle
2015-08-25 19:16 - 2014-07-23 11:28 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-08-25 19:16 - 2014-07-23 11:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-25 19:15 - 2014-05-13 20:41 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-25 19:12 - 2015-08-01 23:14 - 00584288 _____ (Oracle Corporation) C:\Users\UdaGuest\Downloads\jxpiinstall.exe
2015-08-25 09:39 - 2014-10-01 15:52 - 00000176 _____ C:\Users\user\AppData\Roaming\WB.CFG
2015-08-25 09:01 - 2015-03-26 22:53 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-08-24 14:30 - 2015-07-08 19:34 - 00004962 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for USERPC-user userpc
2015-08-24 14:10 - 2014-10-26 16:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-24 14:10 - 2014-10-26 16:32 - 00000000 ____D C:\ProgramData\Skype
2015-08-20 10:34 - 2014-06-07 16:45 - 00003090 _____ C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-780537518-3874126668-2360522559-1001
2015-08-20 10:34 - 2014-06-07 16:45 - 00000000 ___RD C:\Users\user\OneDrive
2015-08-15 03:11 - 2014-12-27 20:45 - 00000000 ____D C:\Users\UdaGuest\AppData\Local\Packages
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieUserList
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieSiteList
2015-08-15 02:47 - 2015-02-07 23:10 - 00000000 __SHD C:\Users\UdaGuest\AppData\Local\EmieBrowserModeList
2015-08-12 09:22 - 2014-12-12 16:41 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-12 09:22 - 2014-07-11 01:15 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-12 09:22 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-11 20:06 - 2015-07-12 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-11 20:03 - 2015-07-12 20:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-11 20:03 - 2015-07-12 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-11 20:01 - 2014-01-22 04:09 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-11 19:23 - 2014-01-22 04:09 - 132483416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-11 19:20 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 19:20 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 18:11 - 2014-01-22 13:15 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2014-02-20 18:55 - 2014-02-20 18:55 - 0000132 _____ () C:\Users\user\AppData\Roaming\Adobe PNG Format CC Prefs
2014-09-10 15:10 - 2015-08-09 18:39 - 0000132 _____ () C:\Users\user\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-12-21 21:12 - 2015-04-03 16:56 - 0000033 _____ () C:\Users\user\AppData\Roaming\AdobeWLCMCache.dat
2014-10-01 15:52 - 2015-08-25 09:39 - 0000176 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2014-09-13 22:19 - 2014-12-23 16:09 - 0001456 _____ () C:\Users\user\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-06-25 17:02 - 2014-08-23 00:32 - 0008192 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-10 15:39 - 2015-04-05 01:39 - 0000010 _____ () C:\Users\user\AppData\Local\DSI.DAT
2014-12-17 14:39 - 2014-12-17 14:39 - 0022528 _____ () C:\Users\user\AppData\Local\dsisetup18042342.exe
2014-12-01 19:39 - 2014-12-01 19:39 - 0022528 _____ () C:\Users\user\AppData\Local\dsisetup3412086872.exe
2014-06-25 17:29 - 2014-06-25 17:29 - 0004096 ____H () C:\Users\user\AppData\Local\keyfile3.drm
2012-09-01 02:08 - 2012-09-01 02:08 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Some files in TEMP:
====================
C:\Users\user\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5tscit.dll
C:\Users\user\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-10 13:08

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:06-09-2015 01
Ran by user (2015-09-10 14:58:33)
Running from C:\Users\user\Downloads
Windows 8.1 (X64) (2014-02-14 13:32:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-780537518-3874126668-2360522559-500 - Administrator - Disabled)
Guest (S-1-5-21-780537518-3874126668-2360522559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-780537518-3874126668-2360522559-1005 - Limited - Enabled)
UdaGuest (S-1-5-21-780537518-3874126668-2360522559-1006 - Limited - Enabled) => C:\Users\UdaGuest
user (S-1-5-21-780537518-3874126668-2360522559-1001 - Administrator - Enabled) => C:\Users\user

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.293 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.1.1 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5F769CF4-5263-4C7B-AEB2-C06A73AE4428}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{35FF5DC5-A622-4055-A8BB-6D4F01AF6F57}) (Version: 1.22.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
Crowd Force Pro (HKLM-x32\...\CrowdForce) (Version: 0.46.0 - UNKNOWN)
Crowd Force Pro (x32 Version: 0.46.0 - UNKNOWN) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4407 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.4.5527 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Drag 'n Drop Illustrator (HKLM-x32\...\tnrdragndropillustrator) (Version: 1.1.4 - James J Jones LLC)
Drag 'n Drop Illustrator (x32 Version: 1.1.4 - James J Jones LLC) Hidden
Dropbox (HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)
EasySketchPro version 2.0.1 (HKLM-x32\...\{90BB7D95-EBCA-4276-B15E-156F85E8B1DA}_is1) (Version: 2.0.1 - Inner Cirle Riches)
Ebook Niche Explorer (HKLM-x32\...\EbookNicheExplorer) (Version: 2.0.11 - James J Jones LLC)
Ebook Niche Explorer (x32 Version: 2.0.11 - James J Jones LLC) Hidden
Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard)
Evernote v. 5.4.1 (HKLM-x32\...\{A5F7DF42-F67D-11E3-B7EB-00163E98E7D6}) (Version: 5.4.1.3962 - Evernote Corp.)
FileZilla Client 3.9.0.5 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.5 - Tim Kosse)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Talk Plugin (HKLM-x32\...\{95763F66-297E-30CE-9728-6D0F20BF97F5}) (Version: 5.38.5.0 - Google)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1202 - Hewlett-Packard)
HP MyRoom (HKLM-x32\...\{9C35EDE5-4B0F-45E7-A438-314BA889948E}) (Version: 9.0.0.0 - Hewlett-Packard Company)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Jutoh 2.19 (HKLM-x32\...\Jutoh_is1) (Version: 2.19 - Anthemion Software Ltd.)
Kindle Comic Creator (HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\KC2) (Version: 1.100 - Amazon)
KindlePreviewer (HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\KindlePreviewer) (Version: 2.92 - Amazon)
Little Red Snapper v1.0 (HKLM-x32\...\LittleRedSnapperv1.0) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Media View (HKLM-x32\...\MediaViewV1alpha6779) (Version: 1.1 - Media View) <==== ATTENTION
Media Watch (HKLM-x32\...\MediaWatchV1home7120) (Version: 1.1 - Media Watch) <==== ATTENTION
Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 15.0.4745.1002 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-780537518-3874126668-2360522559-1001\...\OneDriveSetup.exe) (Version: 17.3.5930.0814 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 en-US)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.0.0 - Ralink)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6675 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28123 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden
Revo Uninstaller Pro 3.1.4 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.4 - VS Revo Group, Ltd.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
TTS Video Studio (HKLM-x32\...\TTS Video Studio) (Version: 1.0 - )
VideoMakerFX (HKLM-x32\...\VideoMakerFX 1.05) (Version: 1.05 - Webvati)
VideoMakerFX (x32 Version: 1.05 - Webvati) Hidden
VideoMakerFX ProThemes May Addon 1.1 (HKLM-x32\...\{4753C1C3-821E-429F-8ED1-19B3DC37FECE}) (Version: 1.1 - Webvati)
VideoMakerFX VideoProfitFX Add On 1.0 (HKLM-x32\...\{8F99303E-4E46-45DC-964D-649DBC72B717}) (Version: 1.0 - Webvati)
VideosAlchemy (HKLM-x32\...\VideosAlchemy) (Version: 1.3.0 - InspiredSoft LTD)
VideosAlchemy (x32 Version: 1.3.0 - InspiredSoft LTD) Hidden
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-780537518-3874126668-2360522559-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

==================== Restore Points =========================

27-08-2015 13:38:03 Scheduled Checkpoint
08-09-2015 20:30:59 Scheduled Checkpoint
10-09-2015 11:37:11 Removed Drag 'n Drop Illustrator
10-09-2015 13:09:15 Revo Uninstaller Pro's restore point - Google Chrome
10-09-2015 13:29:42 Revo Uninstaller Pro's restore point - Google Chrome
10-09-2015 13:37:49 Revo Uninstaller Pro's restore point - Google Chrome
10-09-2015 13:51:55 Revo Uninstaller Pro's restore point - Google Chrome
10-09-2015 13:56:19 Revo Uninstaller Pro's restore point - Google Chrome
10-09-2015 14:10:42 Revo Uninstaller Pro's restore point - Google Chrome(1)
10-09-2015 14:20:05 Revo Uninstaller Pro's restore point - Google Chrome(1)
10-09-2015 14:24:19 Revo Uninstaller Pro's restore point - Google Chrome(1)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 09:25 - 2015-07-27 11:09 - 00000854 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.1    mssplus.mcafee.com

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1309A1C0-A2DB-4262-96C3-FF119E480D86} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {14B872C9-ED54-4ACC-A2E9-1A45CAD02CCE} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {265580AC-D197-4F42-816A-4C91F3D5D22D} - System32\Tasks\Microsoft Office 15 Sync Maintenance for USERPC-user userpc => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)
Task: {26B9141C-631A-4C0E-A95B-4522B3567AD5} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-07-14] (Microsoft Corporation)
Task: {2AA62477-5B22-467E-AA49-7F68B5D7E107} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-14] (Microsoft Corporation)
Task: {2B6E10AE-FE81-44E2-A5B8-143E87FD6ADE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {36E16F59-24D9-4A5C-9255-DE5BD21BF0DF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {37B9FCBD-F30F-4918-85F9-46B9CA5F74C7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {4AAEABAA-E65B-4189-9107-8C38AFD451B5} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {4FFD0599-7F91-4DC3-978F-BB6B9DE4D028} - System32\Tasks\IEError => C:\Program Files (x86)\Portable Booster\IEError.exe
Task: {6B0B2120-5C8C-41BD-99CD-78072544B2F3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-14] (Microsoft Corporation)
Task: {756066B0-1679-4F4D-8A35-AB8BADFAB9CE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {7935C9E3-6D31-4933-BC18-7D72061C5F76} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-11] (Microsoft Corporation)
Task: {81E38324-0025-4410-A9D7-236D68F84350} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-10-14] (Adobe Systems Incorporated)
Task: {879E017A-2757-40C0-94F7-6E595A4E0530} - System32\Tasks\{A419B74D-0C21-43E1-99CC-BFEF4E4A5784} => Firefox.exe http://ui.skype.com/...#38;page=tsMain
Task: {89A47AF2-09A5-4ED2-A528-86E48B6B4162} - System32\Tasks\AI_Updater => C:\Program Files (x86)\Portable Booster\\updater.exe
Task: {8B0D8C2B-4E4D-45B8-A843-D24779A644B9} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {903B640C-038C-42FE-A123-D556B4A168C1} - System32\Tasks\boosterpop => C:\Program Files (x86)\Portable Booster\\WarningPopUp.exe
Task: {945E4135-715C-4DC0-8BC4-C2C05D99664C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {94FE0551-7766-42F1-B488-80D9F719EBC9} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-780537518-3874126668-2360522559-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {99C96727-8F27-440D-B614-2A80603C7BB2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {AF6B1112-164D-4BA5-B76A-7802694B6049} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exe <==== ATTENTION
Task: {B09F7EA6-EEF4-48C3-BE7D-6448D7312FF0} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe
Task: {B8CFA817-9A01-4D34-999E-457849A30C0C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {CC36FBCE-BEBE-48B6-BD9B-02C8DFF95D64} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {CD20133C-92BA-4E41-BD35-070267D73DB7} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exe <==== ATTENTION
Task: {D0CA6E4C-7A65-46DB-B609-82DB42FE3C21} - System32\Tasks\{4398EDD6-AC3B-4BB1-B78A-DDADFA56CC60} => pcalua.exe -a E:\AutoPlay.exe -d E:\ -c -c
Task: {D8A8741F-AFA1-45BC-8531-65E4136E8CD5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {E6CD2D39-BAF0-4321-B0E2-769446BF94A5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {EF434080-2C0E-409A-B8AB-67FF54AC3254} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\WINDOWS\AutoKMS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job => C:\Users\user\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001Core.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-780537518-3874126668-2360522559-1001UA.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-03-26 22:53 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-07-19 21:06 - 2012-07-19 21:06 - 00120224 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2012-07-19 21:06 - 2012-07-19 21:06 - 00048544 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2012-07-19 21:07 - 2012-07-19 21:07 - 00180224 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2015-03-26 23:08 - 2015-03-26 23:08 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-02-14 09:33 - 2014-02-14 09:33 - 00120224 _____ () C:\Users\user\AppData\Local\assembly\dl3\D8EKTK6T.GTP\M8NDKTVR.C8P\48c379a0\0038bcf4_1366cd01\HPItunesModule.DLL
2012-05-04 19:42 - 2012-05-04 19:42 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2015-07-04 18:45 - 2015-07-04 18:45 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\ErrorReporting.dll
2015-03-26 22:53 - 2015-03-26 22:53 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2015-05-04 20:01 - 2015-05-04 20:03 - 01754296 _____ () C:\Program Files\Microsoft Office 15\root\office15\tmpod.dll
2015-03-26 22:53 - 2015-03-26 22:58 - 00022696 _____ () C:\Program Files\Microsoft Office 15\root\office15\lynchtmlconvpxy.dll
2012-09-01 01:18 - 2012-06-07 23:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 14:34 - 2012-06-08 14:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-09-10 14:32 - 2015-09-10 14:32 - 00071168 _____ () c:\users\user\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5tscit.dll
2015-03-04 17:45 - 2015-08-05 01:26 - 00012800 _____ () C:\Users\user\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 17:45 - 2015-08-05 01:26 - 00779776 _____ () C:\Users\user\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-08-01 09:13 - 2015-08-05 01:26 - 00056320 _____ () C:\Users\user\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 17:45 - 2015-08-05 01:26 - 00012288 _____ () C:\Users\user\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2014-06-17 18:10 - 2014-06-17 18:10 - 00436576 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2014-06-17 18:10 - 2014-06-17 18:10 - 00318304 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2015-09-10 14:32 - 2015-09-10 14:32 - 00098816 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32api.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00110080 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\pywintypes27.dll
2015-09-10 14:32 - 2015-09-10 14:32 - 00364544 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\pythoncom27.dll
2015-09-10 14:32 - 2015-09-10 14:32 - 00045568 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_socket.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 01160704 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_ssl.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00320512 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32com.shell.shell.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00713216 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_hashlib.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 01175040 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._core_.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00805888 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._gdi_.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00811008 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._windows_.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 01062400 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._controls_.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00735232 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._misc_.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00128512 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_elementtree.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00127488 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\pyexpat.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00557056 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\pysqlite2._sqlite.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00087552 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_ctypes.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00119808 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32file.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00108544 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32security.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00007168 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\hashobjs_ext.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00167936 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32gui.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00018432 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32event.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00038912 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32inet.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00011264 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32crypt.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00070656 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._html2.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00027136 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\_multiprocessing.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00035840 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32process.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00686080 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\unicodedata.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00122368 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._wizard.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00024064 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32pipe.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00025600 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32pdh.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00525640 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\windows._lib_cacheinvalidation.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00010240 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\select.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00017408 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32profile.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00022528 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\win32ts.pyd
2015-09-10 14:32 - 2015-09-10 14:32 - 00078336 _____ () C:\Users\user\AppData\Local\Temp\_MEI30922\wx._animate.pyd

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\user\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\user\Desktop\Screenshot 2014-12-02 10.11.45.png:com.dropbox.attributes

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-780537518-3874126668-2360522559-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
DNS Servers: 64.71.255.204 - 64.71.255.198
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{F4C0B2C7-CD13-402A-A288-6D5B913D058D}C:\users\user\appdata\local\kindle previewer\lib\touchlibs\webreader.exe] => (Allow) C:\users\user\appdata\local\kindle previewer\lib\touchlibs\webreader.exe
FirewallRules: [TCP Query User{8071E52C-FF90-45BC-AAA2-41BD9F067229}C:\users\user\appdata\local\kindle previewer\lib\touchlibs\webreader.exe] => (Allow) C:\users\user\appdata\local\kindle previewer\lib\touchlibs\webreader.exe
FirewallRules: [{1FDB8827-A4DD-4007-9843-6FD619E51ACD}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{D312DC56-56A0-4099-B93F-960118796F3B}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{B64E49E5-94BF-449F-9A42-47B2E2169AEC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{139C8C47-8536-4B53-B90E-9A0B55EC7D02}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{1C863A37-F92E-4E25-9BA2-FAC1BDE875FF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6AF60E05-21F4-4695-A0C0-A6E5A76FF70C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{21ECD2A5-6FEC-4EA7-8C4C-4BC50885DC79}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{BAEEB70D-8FF3-46D8-8719-B2B43AAEB540}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{BC419AAF-AD35-4612-9DB7-C09FA7201435}] => (Allow) C:\Users\user\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{9D99956F-91D9-46B0-B4D2-F95D56C9DE1F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BEBD16FE-2A96-45F2-BBE6-C11E6398205A}] => (Allow) LPort=2869
FirewallRules: [{B80E63D6-BF91-4935-A88A-D5CCE592BAB2}] => (Allow) LPort=1900
FirewallRules: [{85352F01-AAE2-4EC6-A6EA-E01701B5C5E7}] => (Allow) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{0A6F21C4-DBCB-4110-89EA-73B627D9BB55}] => (Allow) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{7E802B9D-1C19-4300-A09A-1C94456DB3D3}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{217B907F-A85A-467D-AAA0-AB2640F75287}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{55F61B34-9FD1-43B4-B926-91391D9DBEB1}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{5579A617-4BDB-4FED-8609-43BE584F6D97}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{CD94B216-82DA-40B3-8A43-A43E621FE56F}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Converter\fcmediap.exe
FirewallRules: [{408B074C-B4D7-4799-A603-2B61A8415AF6}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Converter\fcmediap.exe
FirewallRules: [{8AB7E8C9-1918-4D4B-A0DC-6D10CC00AC9D}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Audio\fcaudiop.exe
FirewallRules: [{6457825D-2FE0-4638-B7DC-89BA2AB7D14F}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Audio\fcaudiop.exe
FirewallRules: [{527BAC27-3D57-4CB3-8B66-1713FDEF3609}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Screen\fcscreenp.exe
FirewallRules: [{1A9C8AC0-EFC4-47A8-9350-5DC236471816}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Screen\fcscreenp.exe
FirewallRules: [{70CD1A59-A133-4819-8A77-FED2CA1A987C}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Video\fcvideop.exe
FirewallRules: [{EE054611-F618-4FD1-A204-D2BCBC3E7184}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Video\fcvideop.exe
FirewallRules: [{59832B0D-6C57-4336-BE41-FF2FAC0ED58F}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Video\fctubep.exe
FirewallRules: [{57B5D4A9-84E9-4E5B-9FBA-BA38972FA92F}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Video\fctubep.exe
FirewallRules: [{28021372-9A38-4F62-9F47-D4AC9DF10C36}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Torrent\fctorrentp.exe
FirewallRules: [{4AD1078C-D004-46B7-9B39-58356985290A}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Torrent\fctorrentp.exe
FirewallRules: [{846FFA26-A9B6-43AB-8D95-5E877B7A62BB}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Torrent\aria2c.exe
FirewallRules: [{9BA3DDFA-5799-4E35-967C-6CA4B647C2BA}] => (Allow) C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Torrent\aria2c.exe
FirewallRules: [{8E7D2FA7-378C-43A0-A32A-CE273E4C77FA}] => (Allow) C:\Program Files (x86)\Klip Pal\bin\KlipPal.BRT.Helper.exe
FirewallRules: [{8A0C99B9-D9D7-4948-B435-C28D4BEBBD16}] => (Allow) C:\Program Files (x86)\Klip Pal\bin\KlipPal.BRT.Helper.exe
FirewallRules: [{FF414D6F-6615-45A2-A720-2C1E488A6A1E}] => (Allow) C:\Program Files (x86)\Klip Pal\bin\KlipPal.BRT.Helper.exe
FirewallRules: [{BC2FD4FA-E63E-4341-9721-286C5439B805}] => (Allow) C:\Program Files (x86)\Klip Pal\bin\KlipPal.BRT.Helper.exe
FirewallRules: [TCP Query User{D21590D9-79E8-4120-8DE7-3F3E534EFD95}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{538F82B9-1D91-42E2-A490-E5B1389F400F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{95426560-4017-40BB-9523-CFE319A26C1E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{76F2A69B-071A-41E6-A33A-FA48332DD3CC}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{EFB88FAA-3602-4432-8E43-63067A10DB83}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{3104E015-8419-4EFA-BB04-4FF70F22C032}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{129BEBC4-75F1-4E77-9B29-B53BCEA9FABC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{826EDC35-EA13-452E-B139-9E66C5A15BEE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{9F8EC767-95F2-40A3-92D0-0FF02DF5E295}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{70750A2D-C3E6-4B3E-A6FA-44EC4808E928}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4547880F-F797-42E6-A713-A0DB41BAB7D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D8A93994-03B7-4639-9BDC-3E0978C85320}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B44CFF84-59C2-4F92-8548-080EA8D1CD45}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{232FBB5F-7A63-4436-A8B6-82E54ED5D70C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{CA332B2A-9273-466B-919D-2CE84AC93AA9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{82AB118D-075E-46FD-9226-6A7DC05F87D8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{FE11316A-0450-4050-8EE2-FBD664C28DA1}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{EBA15CEE-FF82-40DB-A721-4B81DFBA5361}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{A9E4209E-5EF9-487A-AC74-138C4DCB2CAE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{5BA06AA4-A9AC-432A-A746-5E8E4611E873}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{B1763B64-DFFA-4BB6-A41E-A3513FDF04B2}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F7B78803-8044-4F3B-8469-0F3B38BD1507}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{0B892151-99AC-4E5F-9966-DE47DF7A1F5D}C:\program files\microsoft office 15\root\office15\lync.exe] => (Block) C:\program files\microsoft office 15\root\office15\lync.exe
FirewallRules: [UDP Query User{C439E135-7203-4354-B4F3-BFB6C020C0AC}C:\program files\microsoft office 15\root\office15\lync.exe] => (Block) C:\program files\microsoft office 15\root\office15\lync.exe
FirewallRules: [{76B40E3C-81AC-4D92-9B2F-FC224F86D825}] => (Allow) LPort=53000
FirewallRules: [{9468CD63-42C5-4F7E-8DAC-BA63E5E08E63}] => (Allow) LPort=52000

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/10/2015 02:11:04 PM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy.  Check the Application and System event logs for any related errors.


Operation:
   OnFreeze event
   Freeze Event

Context:
   Execution Context: Registry Writer
   Execution Context: Writer
   Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Name: Registry Writer
   Writer Instance ID: {8b40108a-81d6-4a44-bd75-48a937c2adc6}

Error: (09/10/2015 02:07:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program RevoUninPro.exe version 3.1.4.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 15c0

Start Time: 01d0ebee07c8cac5

Termination Time: 31

Application Path: C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe

Report Id: c612b800-57e6-11e5-bfc4-089e0141f283

Faulting package full name:

Faulting package-relative application ID:

Error: (09/10/2015 01:09:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {07643286-5ecc-4f8a-bc1e-35d99701ae84}

Error: (09/10/2015 11:50:52 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (09/10/2015 11:50:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Skype.exe, version: 7.8.0.102, time stamp: 0x55c4ffc4
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x76ff0309
Faulting process id: 0xdfc
Faulting application start time: 0xSkype.exe0
Faulting application path: Skype.exe1
Faulting module path: Skype.exe2
Report Id: Skype.exe3
Faulting package full name: Skype.exe4
Faulting package-relative application ID: Skype.exe5

Error: (09/10/2015 11:48:15 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (09/10/2015 11:48:15 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (09/10/2015 10:33:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (09/10/2015 10:33:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (09/09/2015 03:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61062


System errors:
=============
Error: (09/10/2015 12:21:30 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246013: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2 x64 Edition - September 2015 (KB890830).

Error: (09/10/2015 11:43:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (09/10/2015 10:29:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (09/10/2015 10:29:58 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Background Intelligent Transfer Service service hung on starting.

Error: (09/10/2015 10:25:30 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:05:38 PM on ‎9/‎9/‎2015 was unexpected.

Error: (09/09/2015 09:06:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Google Update Service (gupdate) service failed to start due to the following error:
%%2

Error: (09/08/2015 09:01:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home.

Error: (09/08/2015 07:16:06 PM) (Source: DCOM) (EventID: 10016) (User: USERPC)
Description: application-specificLocalActivation{9E175B6D-F52A-11D8-B9A5-505054503030}{9E175B9C-F52A-11D8-B9A5-505054503030}userpcuserS-1-5-21-780537518-3874126668-2360522559-1001LocalHost (Using LRPC)UnavailableS-1-15-2-3071221864-1284902476-3887897060-3943711809-1333468997-1495444145-4180768065

Error: (09/08/2015 07:15:33 PM) (Source: DCOM) (EventID: 10016) (User: USERPC)
Description: application-specificLocalActivation{9E175B6D-F52A-11D8-B9A5-505054503030}{9E175B9C-F52A-11D8-B9A5-505054503030}userpcuserS-1-5-21-780537518-3874126668-2360522559-1001LocalHost (Using LRPC)UnavailableS-1-15-2-3071221864-1284902476-3887897060-3943711809-1333468997-1495444145-4180768065

Error: (09/08/2015 06:31:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home.


Microsoft Office:
=========================
Error: (09/10/2015 02:11:04 PM) (Source: VSS) (EventID: 12344) (User: )
Description: 0x00000000c000014d

Operation:
   OnFreeze event
   Freeze Event

Context:
   Execution Context: Registry Writer
   Execution Context: Writer
   Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Name: Registry Writer
   Writer Instance ID: {8b40108a-81d6-4a44-bd75-48a937c2adc6}

Error: (09/10/2015 02:07:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: RevoUninPro.exe3.1.4.015c001d0ebee07c8cac531C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exec612b800-57e6-11e5-bfc4-089e0141f283

Error: (09/10/2015 01:09:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Access is denied.


Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {07643286-5ecc-4f8a-bc1e-35d99701ae84}

Error: (09/10/2015 11:50:52 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1

Error: (09/10/2015 11:50:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Skype.exe7.8.0.10255c4ffc4unknown0.0.0.000000000c000000576ff0309dfc01d0ebdf6985bb4bC:\Program Files (x86)\Skype\Phone\Skype.exeunknowna5c5e5cf-57d3-11e5-bfc4-089e0141f283

Error: (09/10/2015 11:48:15 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F2030000E5050000

Error: (09/10/2015 11:48:15 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance163707000000000000000000008F020000

Error: (09/10/2015 10:33:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F2030000E5050000

Error: (09/10/2015 10:33:20 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance163707000000000000000000008F020000

Error: (09/09/2015 03:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61062


CodeIntegrity:
===================================
  Date: 2015-09-10 13:31:52.487
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 13:31:50.835
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 13:31:49.122
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 13:31:22.879
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 13:31:18.518
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 11:51:43.379
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 11:51:41.876
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 11:51:40.380
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 11:51:34.402
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-09-10 11:51:31.737
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: AMD E1-1200 APU with Radeon™ HD Graphics
Percentage of memory in use: 30%
Total physical RAM: 7756.08 MB
Available physical RAM: 5389.3 MB
Total Virtual: 9292.08 MB
Available Virtual: 6659.52 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:444.16 GB) (Free:333.83 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:19.78 GB) (Free:2.43 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: D370BA94)

Partition: GPT.

==================== End of Addition.txt ============================


Edited by joy66, 10 September 2015 - 01:04 PM.

  • 0

#14
Naathim

Naathim

    GeekU Minion

  • Expert
  • 4,568 posts
Hi,


ckscanner.jpg Scan with CKScanner

Download CKScanner by askey127 and save it to your desktop.
  • Right-click on ckscanner.jpg icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • click Search For Files.
  • When finished, click Save List To File.
  • Remember to run this tool once only, if not asked to run it again.
Please include the content of CKFiles.txt in your next reply.
  • 0

#15
joy66

joy66

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts

Hi,


ckscanner.jpg Scan with CKScanner

Download CKScanner by askey127 and save it to your desktop.

  • Right-click on ckscanner.jpg icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • click Search For Files.
  • When finished, click Save List To File.
  • Remember to run this tool once only, if not asked to run it again.
Please include the content of CKFiles.txt in your next reply.

 

Thanks this the tet

 

CKScanner 2.5 - Additional Security Risks - These are not necessarily bad
scanner sequence 3.RP.11.QLNAW0
 ----- EOF -----


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP