Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Creepy http://www.google.com/?gws_rd=ssl &SSL OFF is Back!


  • Please log in to reply
17 replies to this topic

#1 bonnie848

bonnie848

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 24 July 2014 - 06:01 PM

Noknojon worked with me before trying to solve. It seemed to go away by itself, but now it's back on all three browsers. I have homepages set to: https://www.google.com/ and it still forwards to http://www.goggle.com/?gws_rd=ssl and when I do a search on that page, I get this graphic to the right side of the results page:

 

15e6xox.jpg I also get these ads at top and bottom of the results: a0l5w5.jpg

 

 

I didn't run any scans as of yet.



BC AdBot (Login to Remove)

 


#2 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:39 AM

Posted 29 July 2014 - 06:05 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/542145 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.

    DDS.com Download Link
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control can be found HERE.

As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#3 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 01 August 2014 - 07:01 AM

This seems to be a very intermittent problem. It just happened again this morning, so it's still happening. When I go to Google, and use https://www.google.com the resulting page is appended with

http://www.google.com/?gws_rd=ssl and is SSL turned OFF

I do not have the Windows 7 64-bit disk, but I think my computer has a reinstall partition.

 

Here is the DDS log:

 

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17207  BrowserJavaVersion: 10.65.2
Run by robert at 7:54:56 on 2014-08-01
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8140.4962 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\StkCSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32\alg.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\WordWeb\wweb32.exe
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\robert\AppData\Local\Temp\Techinline\TiLauncher.exe
C:\Program Files (x86)\TraderXL\DownloaderMDB.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\robert\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxps://encrypted.google.com/
uSearch Bar = Preserve
BHO: SnagIt Toolbar Loader: {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Evernote extension: {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: Snagit: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
uRun: [PlayOn] C:\Program Files (x86)\MediaMall\PlayOn.exe
uRun: [Google Update] "C:\Users\robert\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [ABBYY Screenshot Reader Bonus] <no file>
mRun: [WordWeb] "C:\Program Files (x86)\WordWeb\wweb32.exe" -startup
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
mRun: [Adobe_ID0ENQBO] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
mRun: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [PMSpeed] C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.EXE
dRun: [EEDSpeedLauncher] rundll32.exe C:\Windows\System32\eed_ec.dll,SpeedLauncher
StartupFolder: C:\Users\robert\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DOCKET~1.LNK - C:\Program Files (x86)\DocuCap\DocketSCAN II\DocketSCAN.exe
StartupFolder: C:\Users\robert\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\LAUNCH~1.LNK - C:\Program Files (x86)\Ambir Technology\AmbirScanLite\AmbirScan.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: EnableShellExecuteHooks = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
IE: Clip image - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
IE: Clip selection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
IE: Clip this page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
IE: Clip URL - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
IE: New note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
   If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} - hxxp://www.iradiopop.com/IRD/INDBrowser.CAB
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8C2D1BF0-5364-403C-9968-E6E348C6B4FB} - hxxp://www.iradiopop.com/IRD/pages/VBIRDPlayer.CAB
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
TCP: NameServer = 192.168.1.10
TCP: Interfaces\{2BDC04AA-59C8-4677-991A-62CAAB571731} : DHCPNameServer = 192.168.1.10
TCP: Interfaces\{2BDC04AA-59C8-4677-991A-62CAAB571731}\34963736F61323538373 : DHCPNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{2BDC04AA-59C8-4677-991A-62CAAB571731}\D4147494347514E444 : DHCPNameServer = 192.168.1.2
TCP: Interfaces\{C95DCBAB-03AA-42CD-B4CF-8E6C63AFBCC1} : DHCPNameServer = 192.168.1.10
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: SnagIt Toolbar Loader: {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll
x64-BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
x64-TB: Snagit: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
x64-Run: [WrtMon.exe] C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
x64-RunOnce: [NCPluginUpdater] "c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe" Update
x64-IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
x64-IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html
.
INFO: x64-HKLM has more than 50 listed domains.
   If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxps://google.com/
FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\browser\plugins\npatgpc.dll
FF - plugin: C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll
FF - plugin: C:\Users\robert\AppData\Roaming\Mozilla\plugins\npatgpc.dll
FF - plugin: C:\Users\robert\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\robert\AppData\Roaming\Mozilla\plugins\npo1d.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_165.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_170.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_160.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2014-1-25 268512]
R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-5-14 759048]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-11-29 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-6-4 241152]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-8-31 1166848]
R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-6-3 134928]
R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-2-18 265544]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2013-11-4 92160]
R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-5-27 30520]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-5-21 49464]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-7-11 26680]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-9-5 13592]
R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-11-29 2413056]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-8-30 133928]
R2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344]
R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.SYS [2013-4-10 11576]
R2 StkSSrv;Syntek AVStream USB2.0 ATV Service;C:\Windows\System32\StkCSrv.exe [2011-9-19 24576]
R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-9-5 2656280]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;C:\Windows\System32\drivers\amppal.sys [2011-8-8 299008]
R3 hpCMSrv;HP Connection Manager 4.0 Service;C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-2-15 1071160]
R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-6-19 342528]
R3 intelkmd;intelkmd;C:\Windows\System32\drivers\igdpmd64.sys [2012-6-12 12289472]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-3-11 347872]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2011-11-29 91648]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2011-11-29 208896]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\System32\drivers\RtsPStor.sys [2011-9-5 338536]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-9-5 428136]
R3 vrvd5;vrvd5;C:\Windows\System32\drivers\vrvd5.sys [2014-5-30 13344]
R3 wdkmd;Intel WiDi KMD;C:\Windows\System32\drivers\WDKMD.sys [2011-2-16 42392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 ezSharedSvc;Easybits Services for Windows;C:\Windows\System32\ezSharedSvcHost.exe --> C:\Windows\System32\ezSharedSvcHost.exe [?]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-8-15 284016]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol;C:\Windows\System32\drivers\amppal.sys [2011-8-8 299008]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-9-12 1038088]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-7-10 111616]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-7-21 19456]
S3 SQTECH913D;Photo Frame;C:\Windows\System32\drivers\Capt8080.sys [2014-6-28 28352]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 StkCMini;Syntek AVStream USB2.0 ATV;C:\Windows\System32\drivers\StkCMini.sys [2011-9-19 632704]
S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\drivers\taphss6.sys [2014-5-6 42184]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-7-21 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2013-7-21 30208]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-9-13 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== File Associations ===============
.
FileExt: .js: jsfile="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS4\Dreamweaver.exe","%1"
ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS4\dreamweaver.exe", "%1"
.
=============== Created Last 30 ================
.
2014-08-01 11:34:49    10924376    ----a-w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B9C56B86-F2D4-432E-8DD4-25C6114BCF89}\mpengine.dll
2014-07-30 23:59:14    10924376    ----a-w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-07-30 23:59:14    10924376    ----a-w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A23BDAE7-119D-4806-86B0-0E296245080A}\mpengine.dll
2014-07-30 01:40:37    1031560    ------w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{07783499-1BFB-4369-A562-4B15D15CAEB4}\gapaengine.dll
2014-07-29 15:16:53    869016    ----a-w-    C:\Windows\SysWow64\SmartUI2.ocx
2014-07-29 15:16:53    --------    d-----w-    C:\Users\robert\AppData\Local\Trader
2014-07-29 15:16:53    --------    d-----w-    C:\Program Files (x86)\TraderXL
2014-07-29 15:05:42    83112    ----a-w-    C:\Windows\SysWow64\axlAU.dll
2014-07-29 15:05:42    525480    ----a-w-    C:\Windows\SysWow64\faxl7.dll
2014-07-29 15:05:42    33960    ----a-w-    C:\Windows\SysWow64\vPrTXL.dll
2014-07-29 15:05:42    1118208    ----a-w-    C:\Windows\SysWow64\tdbl8.ocx
2014-07-29 15:05:41    606208    ----a-w-    C:\Windows\SysWow64\btnplus1.ocx
2014-07-29 15:05:41    565248    ----a-w-    C:\Windows\SysWow64\vsflex8l.ocx
2014-07-29 15:05:41    348160    ----a-w-    C:\Windows\SysWow64\c1sizer.ocx
2014-07-29 15:05:41    212992    ----a-w-    C:\Windows\SysWow64\xadb8.ocx
2014-07-29 15:05:41    1064960    ----a-w-    C:\Windows\SysWow64\tdbg8.ocx
2014-07-29 15:05:41    --------    d-----w-    C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 15:05:41    --------    d-----w-    C:\Program Files (x86)\AnalyzerXL
2014-07-28 14:37:42    --------    d-----w-    C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 14:37:11    --------    d-----w-    C:\Program Files (x86)\Ambir Technology
2014-07-28 14:36:42    --------    d-----w-    C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 14:14:11    --------    d-----w-    C:\Program Files (x86)\Techinline
2014-07-27 15:29:28    --------    d-----w-    C:\ProgramData\Canneverbe Limited
2014-07-25 23:15:01    --------    d-----w-    C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 23:14:09    --------    d-----w-    C:\Program Files (x86)\Gilisoft
2014-07-25 11:35:57    19190960    ----a-w-    C:\Windows\SysWow64\FlashPlayerInstaller.exe
2014-07-24 21:05:13    --------    d-----w-    C:\ProgramData\DocuCap
2014-07-24 21:05:12    --------    d-----w-    C:\Users\robert\AppData\Local\DocuCap
2014-07-24 20:58:45    --------    d-----w-    C:\Users\robert\AppData\Roaming\.oit
2014-07-24 20:58:43    --------    d-----w-    C:\Users\robert\AppData\Local\NewSoft
2014-07-24 20:58:16    --------    d-----w-    C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 20:57:00    147472    ----a-w-    C:\Windows\SysWow64\TWAINDSM.dll
2014-07-24 20:56:25    27632    ----a-w-    C:\Windows\SysWow64\CTL3DV2.DLL
2014-07-24 20:55:29    --------    d-----w-    C:\Program Files (x86)\Common Files\NewSoft
2014-07-24 20:54:47    --------    d-----w-    C:\Windows\SysWow64\color
2014-07-24 20:54:47    --------    d-----w-    C:\Program Files (x86)\NewSoft
2014-07-24 20:54:11    543744    ----a-r-    C:\Users\robert\AppData\Roaming\Microsoft\Installer\{F7103AEA-3A99-4AFD-B6F3-E1039FE0EA41}\DocketSCANIcon.exe
2014-07-24 20:54:07    --------    d-----w-    C:\Program Files (x86)\DocuCap
2014-07-24 20:52:50    --------    d-----w-    C:\Program Files (x86)\Common Files\DocuCap
2014-07-24 20:52:45    --------    d-----w-    C:\Program Files\DocuCap
2014-07-24 20:23:38    --------    d-----w-    C:\Users\robert\ReminderfoxBUPS
2014-07-22 10:29:27    1031560    ------w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A33C9EC6-5F6B-4805-9831-4C1FF07136D3}\gapaengine.dll
2014-07-21 16:15:30    111016    ----a-w-    C:\Windows\System32\WindowsAccessBridge-64.dll
2014-07-21 16:13:10    98216    ----a-w-    C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-20 18:25:00    --------    d-----w-    C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 12:15:38    --------    d-----w-    C:\Program Files (x86)\yWriter5
2014-07-17 12:12:35    --------    d-----w-    C:\keynotenf
2014-07-12 17:32:41    --------    d-----w-    C:\Users\robert\AppData\Roaming\NAPS2
2014-07-12 13:48:19    --------    d-----w-    C:\Users\robert\AppData\Local\ABBYY
2014-07-12 13:46:37    --------    d-----w-    C:\ProgramData\ABBYY
2014-07-12 13:46:37    --------    d-----w-    C:\Program Files (x86)\Common Files\ABBYY
2014-07-12 13:46:37    --------    d-----w-    C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-03 19:10:07    --------    d-----w-    C:\Program Files (x86)\NAPS2
.
==================== Find3M  ====================
.
2014-07-27 22:39:50    122584    ----a-w-    C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-07-25 11:36:11    71344    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-07-25 11:36:11    699568    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
2014-06-30 02:09:33    519168    ----a-w-    C:\Windows\System32\aepdu.dll
2014-06-30 02:04:49    424448    ----a-w-    C:\Windows\System32\aeinv.dll
2014-06-19 01:06:55    2724864    ----a-w-    C:\Windows\System32\mshtml.tlb
2014-06-19 01:06:24    4096    ----a-w-    C:\Windows\System32\ieetwcollectorres.dll
2014-06-19 00:42:57    548352    ----a-w-    C:\Windows\System32\vbscript.dll
2014-06-19 00:42:49    66048    ----a-w-    C:\Windows\System32\iesetup.dll
2014-06-19 00:41:52    48640    ----a-w-    C:\Windows\System32\ieetwproxystub.dll
2014-06-19 00:41:16    83968    ----a-w-    C:\Windows\System32\MshtmlDac.dll
2014-06-19 00:24:30    139264    ----a-w-    C:\Windows\System32\ieUnatt.exe
2014-06-19 00:24:12    111616    ----a-w-    C:\Windows\System32\ieetwcollector.exe
2014-06-19 00:23:53    752640    ----a-w-    C:\Windows\System32\jscript9diag.dll
2014-06-19 00:14:28    940032    ----a-w-    C:\Windows\System32\MsSpellCheckingFacility.exe
2014-06-18 23:59:04    38400    ----a-w-    C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-06-18 23:56:37    2724864    ----a-w-    C:\Windows\SysWow64\mshtml.tlb
2014-06-18 23:51:38    5721088    ----a-w-    C:\Windows\System32\jscript9.dll
2014-06-18 23:38:40    455168    ----a-w-    C:\Windows\SysWow64\vbscript.dll
2014-06-18 23:37:23    61952    ----a-w-    C:\Windows\SysWow64\iesetup.dll
2014-06-18 23:36:35    51200    ----a-w-    C:\Windows\SysWow64\ieetwproxystub.dll
2014-06-18 23:35:55    62464    ----a-w-    C:\Windows\SysWow64\MshtmlDac.dll
2014-06-18 23:27:45    1249280    ----a-w-    C:\Windows\System32\mshtmlmedia.dll
2014-06-18 23:27:07    2040832    ----a-w-    C:\Windows\System32\inetcpl.cpl
2014-06-18 23:23:27    112128    ----a-w-    C:\Windows\SysWow64\ieUnatt.exe
2014-06-18 23:22:40    592896    ----a-w-    C:\Windows\SysWow64\jscript9diag.dll
2014-06-18 23:06:10    32256    ----a-w-    C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-06-18 22:58:27    2266112    ----a-w-    C:\Windows\System32\wininet.dll
2014-06-18 22:52:18    4254720    ----a-w-    C:\Windows\SysWow64\jscript9.dll
2014-06-18 22:46:23    1068032    ----a-w-    C:\Windows\SysWow64\mshtmlmedia.dll
2014-06-18 22:45:59    1964544    ----a-w-    C:\Windows\SysWow64\inetcpl.cpl
2014-06-18 22:13:59    1791488    ----a-w-    C:\Windows\SysWow64\wininet.dll
2014-06-18 02:18:30    692736    ----a-w-    C:\Windows\System32\osk.exe
2014-06-18 01:51:32    646144    ----a-w-    C:\Windows\SysWow64\osk.exe
2014-06-18 01:10:36    3157504    ----a-w-    C:\Windows\System32\win32k.sys
2014-06-06 10:47:08    4558848    ----a-w-    C:\Windows\SysWow64\GPhotos.scr
2014-06-06 10:10:34    624128    ----a-w-    C:\Windows\System32\qedit.dll
2014-06-06 09:44:17    509440    ----a-w-    C:\Windows\SysWow64\qedit.dll
2014-06-05 14:45:15    1460736    ----a-w-    C:\Windows\System32\lsasrv.dll
2014-06-05 14:26:58    22016    ----a-w-    C:\Windows\SysWow64\secur32.dll
2014-06-05 14:25:49    96768    ----a-w-    C:\Windows\SysWow64\sspicli.dll
2014-05-30 18:32:29    70688    ----a-w-    C:\Windows\System32\vrvd5.dll
2014-05-30 18:32:29    13344    ----a-w-    C:\Windows\System32\drivers\vrvd5.sys
2014-05-30 08:08:52    210944    ----a-w-    C:\Windows\System32\wdigest.dll
2014-05-30 08:08:49    86528    ----a-w-    C:\Windows\System32\TSpkg.dll
2014-05-30 08:08:47    340992    ----a-w-    C:\Windows\System32\schannel.dll
2014-05-30 08:08:41    314880    ----a-w-    C:\Windows\System32\msv1_0.dll
2014-05-30 08:08:41    307200    ----a-w-    C:\Windows\System32\ncrypt.dll
2014-05-30 08:08:36    728064    ----a-w-    C:\Windows\System32\kerberos.dll
2014-05-30 08:08:31    22016    ----a-w-    C:\Windows\System32\credssp.dll
2014-05-30 07:52:51    172032    ----a-w-    C:\Windows\SysWow64\wdigest.dll
2014-05-30 07:52:49    65536    ----a-w-    C:\Windows\SysWow64\TSpkg.dll
2014-05-30 07:52:45    247808    ----a-w-    C:\Windows\SysWow64\schannel.dll
2014-05-30 07:52:41    220160    ----a-w-    C:\Windows\SysWow64\ncrypt.dll
2014-05-30 07:52:40    259584    ----a-w-    C:\Windows\SysWow64\msv1_0.dll
2014-05-30 07:52:36    550912    ----a-w-    C:\Windows\SysWow64\kerberos.dll
2014-05-30 07:52:30    17408    ----a-w-    C:\Windows\SysWow64\credssp.dll
2014-05-30 06:45:52    497152    ----a-w-    C:\Windows\System32\drivers\afd.sys
2014-05-16 07:53:18    341848    ----a-w-    C:\Windows\SysWow64\DivXControlPanelApplet.cpl
2014-05-12 11:26:10    63704    ----a-w-    C:\Windows\System32\drivers\mwac.sys
2014-05-12 11:26:00    91352    ----a-w-    C:\Windows\System32\drivers\mbamchameleon.sys
2014-05-12 11:25:56    25816    ----a-w-    C:\Windows\System32\drivers\mbam.sys
2014-05-08 09:32:11    3178496    ----a-w-    C:\Windows\System32\rdpcorets.dll
2014-05-08 09:32:11    16384    ----a-w-    C:\Windows\System32\RdpGroupPolicyExtension.dll
2014-05-07 03:00:02    42184    ----a-w-    C:\Windows\System32\drivers\taphss6.sys
.
============= FINISH:  7:55:21.10 ===============

 Attach log:

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 9/12/2011 10:26:10 PM
System Uptime: 7/30/2014 11:21:40 PM (32 hours ago)
.
Motherboard: Hewlett-Packard |  | 1659
Processor: Intel® Core™ i7-2630QM CPU @ 2.00GHz | CPU1 | 2001/1333mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 684 GiB total, 528.086 GiB free.
D: is FIXED (NTFS) - 14 GiB total, 1.608 GiB free.
E: is CDROM (UDF)
F: is FIXED (FAT32) - 0 GiB total, 0.083 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP647: 7/20/2014 9:05:12 PM - Windows Update
RP648: 7/21/2014 12:08:19 PM - Removed Java 7 Update 60 (64-bit)
RP649: 7/21/2014 12:09:20 PM - Removed Java 7 Update 60
RP650: 7/21/2014 12:12:38 PM - Installed Java 7 Update 65
RP651: 7/21/2014 12:14:55 PM - Installed Java 7 Update 65 (64-bit)
RP652: 7/24/2014 10:30:01 AM - Windows Update
RP653: 7/24/2014 4:52:32 PM - Installed DocketPORT 467
RP654: 7/24/2014 4:53:51 PM - Installed DocketSCAN II
RP655: 7/24/2014 4:54:36 PM - Installed Presto! PageManager 9
RP656: 7/24/2014 4:57:53 PM - Installed Presto! PageManager PDF Writer
RP657: 7/24/2014 5:36:33 PM - Windows Update
RP658: 7/24/2014 6:22:52 PM - Installed Microsoft Fix it 50267
RP659: 7/27/2014 6:18:54 PM - Windows Update
RP660: 7/28/2014 10:36:55 AM - Installed AmbirScan Lite.
RP661: 7/30/2014 7:58:40 PM - Windows Update
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
7-Zip 9.20
ABBYY FineReader 9.0 Sprint
AC3Filter 1.63b
Acrobat.com
Adobe Acrobat 9 Pro - English, Français, Deutsch
Adobe Acrobat 9.5.5 - CPSID_83708
Adobe AIR
Adobe Anchor Service CS4
Adobe Anchor Service x64 CS4
Adobe Asset Services CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe CMaps x64 CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe Color Video Profiles CS CS4
Adobe Creative Suite 4 Design Premium
Adobe CSI CS4
Adobe CSI CS4 x64
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Digital Editions
Adobe Dreamweaver CS4
Adobe Drive CS4
Adobe Drive CS4 x64
Adobe Dynamiclink Support
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Fireworks CS4
Adobe Flash CS4
Adobe Flash CS4 Extension - Flash Lite STI en
Adobe Flash CS4 STI-en
Adobe Flash Player 14 ActiveX
Adobe Flash Player 14 Plugin
Adobe Fonts All
Adobe Fonts All x64
Adobe Illustrator CS4
Adobe InDesign CS4
Adobe InDesign CS4 Application Feature Set Files (Roman)
Adobe InDesign CS4 Common Base Files
Adobe InDesign CS4 Icon Handler
Adobe InDesign CS4 Icon Handler x64
Adobe Linguistics CS4
Adobe Linguistics CS4 x64
Adobe Media Encoder CS4
Adobe Media Encoder CS4 Importer
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe PDF Library Files x64 CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 (64 Bit)
Adobe Photoshop CS4 Support
Adobe Reader XI (11.0.07)
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe SGM CS4
Adobe Shockwave Player 12.1
Adobe SING CS4
Adobe Type Support CS4
Adobe Type Support x64 CS4
Adobe Update Manager CS4
Adobe Version Cue CS4 Server
Adobe WinSoft Linguistics Plugin
Adobe WinSoft Linguistics Plugin x64
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
Amazon Kindle
Amazon Send to Kindle
AmbirScan Lite
AMCap
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Control Center
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
AMD Wireless Display v3.0
AnalyzerXL Package 6.1.39
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Audacity 2.0.5
AuthenTec TrueAPI
AutoHotkey 1.0.48.05
Bonjour
calibre
calibre 64bit
CamStudio
CamStudio 2.7.2
CamStudio Lossless Codec
CamStudio OSS Desktop Recorder
Camtasia Studio 7
Canon Auto Update Service
Canon DIGITAL CAMERA Solution Disk Software Guide
CANON iMAGE GATEWAY MyCamera Download Plugin
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon MOV Decoder
Canon MOV Encoder
Canon MovieEdit Task for ZoomBrowser EX
Canon PowerShot SX150 IS Camera User Guide
Canon Utilities CameraWindow DC 8
Canon Utilities CameraWindow Launcher
Canon Utilities Movie Uploader for YouTube
Canon Utilities MyCamera
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
CDBurnerXP
Cisco WebEx Meetings
ClipX
Common Desktop Agent
Connect
CoreAAC Audio Decoder (remove only)
CutePDF Writer 2.8
D3DX10
DHTML Editing Component
DivX Setup
DocketPORT 467
DocketSCAN II
Dropbox
DVDFab 7.0.8.0 (14/07/2010)
DVDStyler v2.5 beta 2
Energy Star Digital Logo
ESU for Microsoft Windows 7
Evernote v. 5.4
Ezvid
FileZilla Client 3.8.1
GiliSoft Video Editor 6.5.0
GOM Player
Google Chrome
Google Drive
Google Earth
Google Talk (remove only)
Google Talk Plugin
Google Update Helper
GoToMeeting 5.1.0.880
Hewlett-Packard ACLM.NET v1.2.2.3
HP 3D DriveGuard
HP Auto
HP Client Services
HP Connection Manager
HP Customer Experience Enhancements
HP Documentation
HP MovieStore
HP On Screen Display
HP Power Manager
HP Quick Launch
HP Setup
HP Setup Manager
HP SimplePass 2011
HP Software Framework
HP Support Assistant
HP Support Solutions Framework
IDT Audio
ImgBurn
InfraRecorder 0.53 (x64 edition)
Intel® Control Center
Intel® Display Audio Driver
Intel® Management Engine Components
Intel® PROSet/Wireless for Bluetooth® 3.0 + High Speed
Intel® Rapid Storage Technology
Intel® Wireless Display
IrfanView (remove only)
iTunes
Java 7 Update 65
Java 7 Update 65 (64-bit)
Java Auto Updater
K-Lite Codec Pack 5.5.0 (64-bit)
KeyNote 1.6.5
kuler
LAME v3.99.3 (for Windows)
Malwarebytes Anti-Malware version 2.0.2.1012
Medved Trader version 1.0.4097.1607
Mesh Runtime
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office 2010
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office Office 64-bit Components 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
Microsoft WSE 3.0 Runtime
Mobipocket Creator 4.2
Mobipocket Reader 6.2
Mozilla Firefox 31.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NAPS2 2.6.3
Network Recording Player
Notepad++
Octoshape add-in for Adobe Flash Player
OpenOffice 4.1.0
OverDrive Media Console
PDF Settings CS4
Photo Viewer V2.08
Photoshop Camera Raw
Photoshop Camera Raw_x64
PhotoView
Picasa 3
Pixel Bender Toolkit
PlayReady PC Runtime x86
Plex Media Server
Presto! PageManager 9.21 Standard
Print Server Driver
PX Profile Update
QuickTime
QuoteTracker
Real Alternative 2.0.2
Realtek Ethernet Controller Driver
Realtek PCIE Card Reader
Recovery Manager
Renesas Electronics USB 3.0 Host Controller Driver
RoxioNow Player
Samsung Easy Printer Manager
Samsung Easy Wireless Setup
Samsung M262x 282x Series
Samsung Printer Live Update
Samsung Universal Print Driver 2
Scrivener
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817330) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2878233) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880507) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880508) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880513) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2881069) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2880515) 32-Bit Edition
SEO Backlink Checker 1.0
Skype™ 6.16
Snagit 10
SpeedFan (remove only)
Stellarium 0.11.2
Suite Shared Configuration CS4
swMSM
Synaptics TouchPad Driver
System Requirements Lab for Intel
TA-Lib Pro Excel
TA-Lib Pro Excel 2.5.0
thinkorswim from TD AMERITRADE
TraderXL 1.0.16
TreeSize Free V2.7
Turbo Lister 2
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
USB2.0 ATV
USB2.0 Capture Device
Validity WBF DDK
VC80CRTRedist - 8.0.50727.6195
View User's Guide
VLC media player 1.0.1
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Media Player Firefox Plugin
WinPcap 4.1.2
Wireshark 1.6.2
WordWeb Pro
x264vfw - H.264/MPEG-4 AVC codec (remove only)
Xvid MPEG-4 Video Codec
yWriter5
Zinio Reader 4
.
==== Event Viewer Messages From Past Week ========
.
7/31/2014 1:25:17 PM, Error: Microsoft-Windows-SharedAccess_NAT [31004]  - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
7/28/2014 8:24:41 AM, Error: Service Control Manager [7000]  - The Easybits Services for Windows service failed to start due to the following error:  The system cannot find the file specified.
7/28/2014 10:14:10 AM, Error: Service Control Manager [7030]  - The Techinline Remote Desktop Client Service:ef5d0315-152f-4150-a393-04859de17861 service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
.
==== End Of File ===========================
 



#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,200 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:39 AM

Posted 04 August 2014 - 07:39 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

===

Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.
To attach a file select the "More Reply Option" and follow the instructions.

Let me know what problem persists.

#5 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 04 August 2014 - 05:10 PM

I didn't see the problem happening before or after running these tools. As of late, it seems intermittent.

 

# AdwCleaner v3.302 - Report created 04/08/2014 at 17:43:07
# Updated 30/07/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : robert - ROBERT-HP
# Running from : C:\Users\robert\Downloads\adwcleaner_3.302.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****

Task Found : LaunchApp

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 en-US)

[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\prefs.js ]


-\\ Google Chrome v36.0.1985.125

*************************

AdwCleaner[R0].txt - [5112 octets] - [01/06/2014 15:22:24]
AdwCleaner[R1].txt - [5662 octets] - [06/07/2014 20:59:12]
AdwCleaner[R2].txt - [1540 octets] - [24/07/2014 19:07:28]
AdwCleaner[R3].txt - [1500 octets] - [25/07/2014 07:58:33]
AdwCleaner[R4].txt - [1305 octets] - [04/08/2014 17:43:07]
AdwCleaner[S0].txt - [4938 octets] - [01/06/2014 15:31:02]
AdwCleaner[S1].txt - [5018 octets] - [06/07/2014 21:04:25]
AdwCleaner[S2].txt - [1605 octets] - [24/07/2014 19:17:00]
AdwCleaner[S3].txt - [1561 octets] - [25/07/2014 08:06:47]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1605 octets] ##########
 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by robert (administrator) on ROBERT-HP on 04-08-2014 17:54:52
Running from C:\Users\robert\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Syntek America Inc.) C:\Windows\System32\StkCSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(WordWeb Software) C:\Program Files (x86)\WordWeb\wweb32.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [WordWeb] => C:\Program Files (x86)\WordWeb\wweb32.exe [65216 2009-11-08] (WordWeb Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-06-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-11-29] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [googletalk] => C:\Program Files (x86)\Google\Google Talk\googletalk.exe [3739648 2007-01-01] (Google)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.EXE [120728 2011-11-22] (NewSoft Technology Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\.DEFAULT\...\Run: [EEDSpeedLauncher] => rundll32.exe C:\Windows\system32\eed_ec.dll,SpeedLauncher
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [PlayOn] => C:\Program Files (x86)\MediaMall\PlayOn.exe
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [Google Update] => C:\Users\robert\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-12] (Google Inc.)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [ABBYY Screenshot Reader Bonus] => [X]
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\MountPoints2: {1e45ebb7-03db-11e2-9c5f-101f7415e3e8} - G:\TVRadio.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launch AmbirScan Lite.lnk
ShortcutTarget: Launch AmbirScan Lite.lnk -> C:\Program Files (x86)\Ambir Technology\AmbirScanLite\AmbirScan.exe (Ambir Technology, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocketSCAN II.lnk
ShortcutTarget: DocketSCAN II.lnk -> C:\Program Files (x86)\DocuCap\DocketSCAN II\DocketSCAN.exe (Document Capture Technologies, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC63CD9B63F57CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://encrypted.google.com/
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM - {DD065C6A-C257-4F8A-B51E-6FB5B03F698F} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {9B97950D-482C-1D79-568F-FC7B9D40C785} URL = http://www.bing.com/search?q={searchTerms}&pc=Z192&form=ZGAIDF&install_date=20110913&iesrc={referrer:source}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} http://www.iradiopop.com/IRD/INDBrowser.CAB
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {8C2D1BF0-5364-403C-9968-E6E348C6B4FB} http://www.iradiopop.com/IRD/pages/VBIRDPlayer.CAB
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.10

FireFox:
========
FF ProfilePath: C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891
FF NewTab: https://google.com/
FF DefaultSearchEngine: Bing
FF SelectedSearchEngine: Bing
FF Homepage: https://google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_160.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_160.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: MeasureIt - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-10]
FF Extension: Integrated Google Calendar - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-07-20]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\optout@google.com.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\sendtokindle@amazon.com.xpi [2014-07-08]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-09]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-09]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-09]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-09]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-09]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\optout@google.com.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\sendtokindle@amazon.com.xpi [2014-07-09]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-09]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-09]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-06-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-11]
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com [2014-06-11]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-05-21] (Hewlett-Packard Company)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2011-11-29] (Realsil Microelectronics Inc.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [24576 2007-02-12] (Syntek America Inc.)
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 msvad_simple; C:\Windows\System32\drivers\povrtdev.sys [28528 2011-10-17] (MediaMall Technologies, Inc.)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 SQTECH913D; C:\Windows\System32\Drivers\Capt8080.sys [28352 2007-05-22] (Service & Quality Technology.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [632704 2007-06-28] (Syntek)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-06] (Anchorfree Inc.)
R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2014-05-30] (Rsupport Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:54 - 2014-08-04 17:56 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:54 - 2014-08-04 17:55 - 00000000 ____D () C:\FRST
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 10:33 - 2014-08-03 19:18 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2007-09-20 13:29 - 00869016 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\SmartUI2.ocx
2014-07-29 11:15 - 2014-07-29 11:16 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:05 - 2010-07-09 16:56 - 00525480 _____ (OLSOFT) C:\Windows\SysWOW64\faxl7.dll
2014-07-29 11:05 - 2010-07-09 16:56 - 00033960 _____ (AXL) C:\Windows\SysWOW64\vPrTXL.dll
2014-07-29 11:05 - 2010-07-09 16:55 - 00083112 _____ (AXL) C:\Windows\SysWOW64\axlAU.dll
2014-07-29 11:05 - 2005-04-29 23:49 - 01118208 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbl8.ocx
2014-07-29 11:05 - 2005-03-18 16:52 - 00565248 _____ (ComponentOne) C:\Windows\SysWOW64\vsflex8l.ocx
2014-07-29 11:05 - 2005-03-11 18:31 - 01064960 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbg8.ocx
2014-07-29 11:05 - 2005-03-11 18:30 - 00212992 _____ (ComponentOne LLC) C:\Windows\SysWOW64\xadb8.ocx
2014-07-29 11:05 - 2005-02-15 14:02 - 00348160 _____ (ComponenetOne) C:\Windows\SysWOW64\c1sizer.ocx
2014-07-29 11:05 - 2004-10-06 13:08 - 00606208 _____ (Innovasys) C:\Windows\SysWOW64\btnplus1.ocx
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-28 10:43 - 2014-08-04 17:50 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 11:04 - 2014-08-03 11:07 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:13 - 2014-07-24 20:14 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:02 - 2014-07-24 19:03 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:05 - 2014-07-26 11:00 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-08-04 17:49 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-07-24 16:58 - 2014-07-28 14:43 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:57 - 2014-07-24 16:58 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:57 - 2010-11-22 13:27 - 00147472 _____ (TWAIN Working Group) C:\Windows\SysWOW64\TWAINDSM.dll
2014-07-24 16:56 - 1999-05-06 14:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-07-24 16:54 - 2014-08-04 08:56 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:53 - 2014-07-26 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:23 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-22 18:28 - 2014-08-01 08:37 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-07-22 18:28 - 2014-08-01 08:37 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2014-07-21 12:12 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 15:13 - 2014-07-20 15:20 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:26 - 2014-07-20 15:32 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 14:25 - 2014-07-20 15:14 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:23 - 2014-07-13 17:24 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 13:32 - 2014-07-26 13:36 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-12 09:48 - 2014-07-12 12:24 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:46 - 2014-07-12 09:50 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:46 - 2014-07-12 09:48 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-10 15:27 - 2014-07-10 15:29 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 06:26 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 06:26 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 06:26 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 06:26 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 06:26 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 06:26 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 06:26 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 06:26 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 06:25 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 06:25 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 06:25 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 06:25 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 06:25 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 06:25 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 06:25 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 06:25 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 06:25 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 06:25 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 06:25 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 06:25 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 06:25 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 06:25 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 06:25 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 06:25 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 06:25 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 06:25 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 06:25 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 06:25 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 06:25 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 06:25 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 06:25 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-08 22:38 - 2014-07-10 07:43 - 00000000 ____D () C:\Program Files\Recuva
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 21:06 - 2014-07-08 22:46 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 18:30 - 2014-07-08 18:39 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:56 - 2014-08-04 17:54 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:55 - 2014-08-04 17:54 - 00000000 ____D () C:\FRST
2014-08-04 17:53 - 2011-09-05 17:48 - 01798154 _____ () C:\Windows\WindowsUpdate.log
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:51 - 2014-06-01 15:22 - 00000000 ____D () C:\AdwCleaner
2014-08-04 17:50 - 2014-07-28 10:43 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-08-04 17:49 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-08-04 17:49 - 2014-06-03 21:31 - 00004220 _____ () C:\Windows\setupact.log
2014-08-04 17:49 - 2013-07-08 16:24 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-08-04 17:49 - 2012-02-13 14:29 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 17:49 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-04 17:48 - 2014-06-27 20:22 - 00028932 _____ () C:\Windows\PFRO.log
2014-08-04 17:48 - 2013-07-07 07:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 17:35 - 2013-01-10 09:52 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-04 17:32 - 2011-09-12 10:34 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7B9F27E6-27A7-4FD8-AC2B-CD83F2FD8AD2}
2014-08-04 17:18 - 2012-02-13 14:29 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 17:16 - 2012-08-12 15:14 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000UA.job
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-04 11:16 - 2012-08-12 15:14 - 00000860 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000Core.job
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 08:56 - 2014-07-24 16:54 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-08-04 07:46 - 2014-04-11 13:04 - 00000099 _____ () C:\Users\Public\LMDebug.log
2014-08-03 19:18 - 2014-08-03 10:33 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 11:07 - 2014-07-26 11:04 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-02 14:26 - 2011-09-13 10:05 - 00000000 ____D () C:\Users\robert\Documents\My Digital Editions
2014-08-01 08:37 - 2014-07-22 18:28 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-08-01 08:37 - 2014-07-22 18:28 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-31 17:38 - 2011-11-01 13:45 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-07-31 17:38 - 2011-09-13 20:48 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-07-30 10:51 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-30 08:25 - 2014-06-11 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2014-07-29 11:15 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-29 10:51 - 2014-06-30 16:02 - 00000837 _____ () C:\Users\Public\Desktop\Medved Trader.lnk
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medved Trader
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\Program Files\Medved Trader
2014-07-28 14:43 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-28 10:53 - 2012-09-20 14:09 - 00000000 ____D () C:\Users\robert\Documents\Add-in Express
2014-07-28 10:39 - 2011-09-12 15:18 - 00000000 ____D () C:\Users\robert\AppData\Local\CrashDumps
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-28 08:14 - 2009-07-14 01:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-27 18:39 - 2014-06-03 12:41 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 16:58 - 2014-07-24 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-26 13:36 - 2014-07-12 13:32 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-26 11:00 - 2014-07-24 17:05 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-25 07:36 - 2013-01-10 09:52 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:14 - 2014-07-24 20:13 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:03 - 2014-07-24 19:02 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:38 - 2012-11-24 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 17:28 - 2011-09-12 22:26 - 00000000 ____D () C:\Users\robert
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:58 - 2014-07-24 16:57 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:54 - 2011-06-21 15:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:24 - 2014-07-24 16:23 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-21 16:41 - 2011-09-19 11:38 - 00000000 ____D () C:\Users\robert\Documents\OneNote Notebooks
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:15 - 2011-09-12 15:30 - 00000000 ____D () C:\Program Files\Java
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2013-10-21 09:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-21 12:12 - 2014-07-21 12:13 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-21 07:49 - 2012-01-22 11:24 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Skype
2014-07-20 15:32 - 2014-07-20 14:26 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 15:20 - 2014-07-20 15:13 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:14 - 2014-07-20 14:25 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:58 - 2013-07-19 14:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:15 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\yWriter5 Sample
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-14 19:53 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:24 - 2014-07-13 17:23 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 12:24 - 2014-07-12 09:48 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:50 - 2014-07-12 09:46 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:48 - 2014-07-12 09:46 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-11 09:12 - 2011-09-12 10:34 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Adobe
2014-07-11 07:09 - 2009-07-14 00:45 - 02955208 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 07:06 - 2014-05-06 22:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 06:49 - 2013-07-12 06:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-11 06:46 - 2011-09-17 08:44 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 20:27 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\Writing
2014-07-10 15:29 - 2014-07-10 15:27 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 07:43 - 2014-07-08 22:38 - 00000000 ____D () C:\Program Files\Recuva
2014-07-09 21:15 - 2014-06-27 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-09 21:15 - 2011-09-13 07:44 - 00000000 ____D () C:\Program Files\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\ProgramData\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-08 22:46 - 2014-07-08 21:06 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 19:09 - 2013-07-07 08:08 - 00000000 ____D () C:\FEBEBUS
2014-07-08 18:39 - 2014-07-08 18:30 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 13:38 - 2012-05-14 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe
2014-07-07 20:47 - 2012-02-09 08:10 - 00000000 ____D () C:\Windows\pss
2014-07-07 10:08 - 2011-09-12 18:56 - 00000000 ____D () C:\Program Files (x86)\QuoteTracker2

Some content of TEMP:
====================
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe
C:\Users\robert\AppData\Local\Temp\GsDownload.dll
C:\Users\robert\AppData\Local\Temp\Quarantine.exe
C:\Users\robert\AppData\Local\Temp\_is3A84.exe
C:\Users\robert\AppData\Local\Temp\_is70A1.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 07:10

==================== End Of Log ============================


I didn't see the problem happening before or after running these tools. As of late, it seems intermittent.

 

# AdwCleaner v3.302 - Report created 04/08/2014 at 17:43:07
# Updated 30/07/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : robert - ROBERT-HP
# Running from : C:\Users\robert\Downloads\adwcleaner_3.302.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****

Task Found : LaunchApp

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 en-US)

[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\prefs.js ]


-\\ Google Chrome v36.0.1985.125

*************************

AdwCleaner[R0].txt - [5112 octets] - [01/06/2014 15:22:24]
AdwCleaner[R1].txt - [5662 octets] - [06/07/2014 20:59:12]
AdwCleaner[R2].txt - [1540 octets] - [24/07/2014 19:07:28]
AdwCleaner[R3].txt - [1500 octets] - [25/07/2014 07:58:33]
AdwCleaner[R4].txt - [1305 octets] - [04/08/2014 17:43:07]
AdwCleaner[S0].txt - [4938 octets] - [01/06/2014 15:31:02]
AdwCleaner[S1].txt - [5018 octets] - [06/07/2014 21:04:25]
AdwCleaner[S2].txt - [1605 octets] - [24/07/2014 19:17:00]
AdwCleaner[S3].txt - [1561 octets] - [25/07/2014 08:06:47]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1605 octets] ##########
 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by robert (administrator) on ROBERT-HP on 04-08-2014 17:54:52
Running from C:\Users\robert\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Syntek America Inc.) C:\Windows\System32\StkCSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(WordWeb Software) C:\Program Files (x86)\WordWeb\wweb32.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [WordWeb] => C:\Program Files (x86)\WordWeb\wweb32.exe [65216 2009-11-08] (WordWeb Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-06-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-11-29] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [googletalk] => C:\Program Files (x86)\Google\Google Talk\googletalk.exe [3739648 2007-01-01] (Google)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.EXE [120728 2011-11-22] (NewSoft Technology Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\.DEFAULT\...\Run: [EEDSpeedLauncher] => rundll32.exe C:\Windows\system32\eed_ec.dll,SpeedLauncher
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [PlayOn] => C:\Program Files (x86)\MediaMall\PlayOn.exe
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [Google Update] => C:\Users\robert\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-12] (Google Inc.)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [ABBYY Screenshot Reader Bonus] => [X]
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\MountPoints2: {1e45ebb7-03db-11e2-9c5f-101f7415e3e8} - G:\TVRadio.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launch AmbirScan Lite.lnk
ShortcutTarget: Launch AmbirScan Lite.lnk -> C:\Program Files (x86)\Ambir Technology\AmbirScanLite\AmbirScan.exe (Ambir Technology, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocketSCAN II.lnk
ShortcutTarget: DocketSCAN II.lnk -> C:\Program Files (x86)\DocuCap\DocketSCAN II\DocketSCAN.exe (Document Capture Technologies, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC63CD9B63F57CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://encrypted.google.com/
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM - {DD065C6A-C257-4F8A-B51E-6FB5B03F698F} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {9B97950D-482C-1D79-568F-FC7B9D40C785} URL = http://www.bing.com/search?q={searchTerms}&pc=Z192&form=ZGAIDF&install_date=20110913&iesrc={referrer:source}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} http://www.iradiopop.com/IRD/INDBrowser.CAB
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {8C2D1BF0-5364-403C-9968-E6E348C6B4FB} http://www.iradiopop.com/IRD/pages/VBIRDPlayer.CAB
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.10

FireFox:
========
FF ProfilePath: C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891
FF NewTab: https://google.com/
FF DefaultSearchEngine: Bing
FF SelectedSearchEngine: Bing
FF Homepage: https://google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_160.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_160.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: MeasureIt - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-10]
FF Extension: Integrated Google Calendar - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-07-20]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\optout@google.com.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\sendtokindle@amazon.com.xpi [2014-07-08]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-09]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-09]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-09]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-09]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-09]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\optout@google.com.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\sendtokindle@amazon.com.xpi [2014-07-09]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-09]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-09]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-06-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-11]
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com [2014-06-11]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-05-21] (Hewlett-Packard Company)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2011-11-29] (Realsil Microelectronics Inc.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [24576 2007-02-12] (Syntek America Inc.)
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 msvad_simple; C:\Windows\System32\drivers\povrtdev.sys [28528 2011-10-17] (MediaMall Technologies, Inc.)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 SQTECH913D; C:\Windows\System32\Drivers\Capt8080.sys [28352 2007-05-22] (Service & Quality Technology.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [632704 2007-06-28] (Syntek)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-06] (Anchorfree Inc.)
R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2014-05-30] (Rsupport Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:54 - 2014-08-04 17:56 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:54 - 2014-08-04 17:55 - 00000000 ____D () C:\FRST
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 10:33 - 2014-08-03 19:18 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2007-09-20 13:29 - 00869016 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\SmartUI2.ocx
2014-07-29 11:15 - 2014-07-29 11:16 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:05 - 2010-07-09 16:56 - 00525480 _____ (OLSOFT) C:\Windows\SysWOW64\faxl7.dll
2014-07-29 11:05 - 2010-07-09 16:56 - 00033960 _____ (AXL) C:\Windows\SysWOW64\vPrTXL.dll
2014-07-29 11:05 - 2010-07-09 16:55 - 00083112 _____ (AXL) C:\Windows\SysWOW64\axlAU.dll
2014-07-29 11:05 - 2005-04-29 23:49 - 01118208 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbl8.ocx
2014-07-29 11:05 - 2005-03-18 16:52 - 00565248 _____ (ComponentOne) C:\Windows\SysWOW64\vsflex8l.ocx
2014-07-29 11:05 - 2005-03-11 18:31 - 01064960 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbg8.ocx
2014-07-29 11:05 - 2005-03-11 18:30 - 00212992 _____ (ComponentOne LLC) C:\Windows\SysWOW64\xadb8.ocx
2014-07-29 11:05 - 2005-02-15 14:02 - 00348160 _____ (ComponenetOne) C:\Windows\SysWOW64\c1sizer.ocx
2014-07-29 11:05 - 2004-10-06 13:08 - 00606208 _____ (Innovasys) C:\Windows\SysWOW64\btnplus1.ocx
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-28 10:43 - 2014-08-04 17:50 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 11:04 - 2014-08-03 11:07 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:13 - 2014-07-24 20:14 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:02 - 2014-07-24 19:03 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:05 - 2014-07-26 11:00 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-08-04 17:49 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-07-24 16:58 - 2014-07-28 14:43 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:57 - 2014-07-24 16:58 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:57 - 2010-11-22 13:27 - 00147472 _____ (TWAIN Working Group) C:\Windows\SysWOW64\TWAINDSM.dll
2014-07-24 16:56 - 1999-05-06 14:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-07-24 16:54 - 2014-08-04 08:56 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:53 - 2014-07-26 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:23 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-22 18:28 - 2014-08-01 08:37 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-07-22 18:28 - 2014-08-01 08:37 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2014-07-21 12:12 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 15:13 - 2014-07-20 15:20 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:26 - 2014-07-20 15:32 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 14:25 - 2014-07-20 15:14 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:23 - 2014-07-13 17:24 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 13:32 - 2014-07-26 13:36 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-12 09:48 - 2014-07-12 12:24 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:46 - 2014-07-12 09:50 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:46 - 2014-07-12 09:48 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-10 15:27 - 2014-07-10 15:29 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 06:26 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 06:26 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 06:26 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 06:26 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 06:26 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 06:26 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 06:26 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 06:26 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 06:25 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 06:25 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 06:25 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 06:25 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 06:25 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 06:25 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 06:25 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 06:25 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 06:25 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 06:25 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 06:25 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 06:25 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 06:25 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 06:25 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 06:25 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 06:25 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 06:25 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 06:25 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 06:25 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 06:25 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 06:25 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 06:25 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 06:25 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-08 22:38 - 2014-07-10 07:43 - 00000000 ____D () C:\Program Files\Recuva
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 21:06 - 2014-07-08 22:46 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 18:30 - 2014-07-08 18:39 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:56 - 2014-08-04 17:54 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:55 - 2014-08-04 17:54 - 00000000 ____D () C:\FRST
2014-08-04 17:53 - 2011-09-05 17:48 - 01798154 _____ () C:\Windows\WindowsUpdate.log
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:51 - 2014-06-01 15:22 - 00000000 ____D () C:\AdwCleaner
2014-08-04 17:50 - 2014-07-28 10:43 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-08-04 17:49 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-08-04 17:49 - 2014-06-03 21:31 - 00004220 _____ () C:\Windows\setupact.log
2014-08-04 17:49 - 2013-07-08 16:24 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-08-04 17:49 - 2012-02-13 14:29 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 17:49 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-04 17:48 - 2014-06-27 20:22 - 00028932 _____ () C:\Windows\PFRO.log
2014-08-04 17:48 - 2013-07-07 07:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 17:35 - 2013-01-10 09:52 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-04 17:32 - 2011-09-12 10:34 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7B9F27E6-27A7-4FD8-AC2B-CD83F2FD8AD2}
2014-08-04 17:18 - 2012-02-13 14:29 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 17:16 - 2012-08-12 15:14 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000UA.job
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-04 11:16 - 2012-08-12 15:14 - 00000860 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000Core.job
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 08:56 - 2014-07-24 16:54 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-08-04 07:46 - 2014-04-11 13:04 - 00000099 _____ () C:\Users\Public\LMDebug.log
2014-08-03 19:18 - 2014-08-03 10:33 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 11:07 - 2014-07-26 11:04 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-02 14:26 - 2011-09-13 10:05 - 00000000 ____D () C:\Users\robert\Documents\My Digital Editions
2014-08-01 08:37 - 2014-07-22 18:28 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-08-01 08:37 - 2014-07-22 18:28 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-31 17:38 - 2011-11-01 13:45 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-07-31 17:38 - 2011-09-13 20:48 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-07-30 10:51 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-30 08:25 - 2014-06-11 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2014-07-29 11:15 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-29 10:51 - 2014-06-30 16:02 - 00000837 _____ () C:\Users\Public\Desktop\Medved Trader.lnk
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medved Trader
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\Program Files\Medved Trader
2014-07-28 14:43 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-28 10:53 - 2012-09-20 14:09 - 00000000 ____D () C:\Users\robert\Documents\Add-in Express
2014-07-28 10:39 - 2011-09-12 15:18 - 00000000 ____D () C:\Users\robert\AppData\Local\CrashDumps
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-28 08:14 - 2009-07-14 01:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-27 18:39 - 2014-06-03 12:41 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 16:58 - 2014-07-24 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-26 13:36 - 2014-07-12 13:32 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-26 11:00 - 2014-07-24 17:05 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-25 07:36 - 2013-01-10 09:52 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:14 - 2014-07-24 20:13 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:03 - 2014-07-24 19:02 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:38 - 2012-11-24 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 17:28 - 2011-09-12 22:26 - 00000000 ____D () C:\Users\robert
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:58 - 2014-07-24 16:57 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:54 - 2011-06-21 15:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:24 - 2014-07-24 16:23 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-21 16:41 - 2011-09-19 11:38 - 00000000 ____D () C:\Users\robert\Documents\OneNote Notebooks
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:15 - 2011-09-12 15:30 - 00000000 ____D () C:\Program Files\Java
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2013-10-21 09:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-21 12:12 - 2014-07-21 12:13 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-21 07:49 - 2012-01-22 11:24 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Skype
2014-07-20 15:32 - 2014-07-20 14:26 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 15:20 - 2014-07-20 15:13 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:14 - 2014-07-20 14:25 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:58 - 2013-07-19 14:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:15 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\yWriter5 Sample
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-14 19:53 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:24 - 2014-07-13 17:23 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 12:24 - 2014-07-12 09:48 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:50 - 2014-07-12 09:46 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:48 - 2014-07-12 09:46 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-11 09:12 - 2011-09-12 10:34 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Adobe
2014-07-11 07:09 - 2009-07-14 00:45 - 02955208 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 07:06 - 2014-05-06 22:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 06:49 - 2013-07-12 06:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-11 06:46 - 2011-09-17 08:44 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 20:27 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\Writing
2014-07-10 15:29 - 2014-07-10 15:27 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 07:43 - 2014-07-08 22:38 - 00000000 ____D () C:\Program Files\Recuva
2014-07-09 21:15 - 2014-06-27 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-09 21:15 - 2011-09-13 07:44 - 00000000 ____D () C:\Program Files\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\ProgramData\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-08 22:46 - 2014-07-08 21:06 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 19:09 - 2013-07-07 08:08 - 00000000 ____D () C:\FEBEBUS
2014-07-08 18:39 - 2014-07-08 18:30 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 13:38 - 2012-05-14 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe
2014-07-07 20:47 - 2012-02-09 08:10 - 00000000 ____D () C:\Windows\pss
2014-07-07 10:08 - 2011-09-12 18:56 - 00000000 ____D () C:\Program Files (x86)\QuoteTracker2

Some content of TEMP:
====================
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe
C:\Users\robert\AppData\Local\Temp\GsDownload.dll
C:\Users\robert\AppData\Local\Temp\Quarantine.exe
C:\Users\robert\AppData\Local\Temp\_is3A84.exe
C:\Users\robert\AppData\Local\Temp\_is70A1.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 07:10

==================== End Of Log ============================



#6 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 04 August 2014 - 05:11 PM

I didn't see the problem happening before or after running these tools. As of late, it seems intermittent.

 

# AdwCleaner v3.302 - Report created 04/08/2014 at 17:43:07
# Updated 30/07/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : robert - ROBERT-HP
# Running from : C:\Users\robert\Downloads\adwcleaner_3.302.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****

Task Found : LaunchApp

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Mozilla Firefox v31.0 (x86 en-US)

[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\prefs.js ]


[ File : C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\prefs.js ]


-\\ Google Chrome v36.0.1985.125

*************************

AdwCleaner[R0].txt - [5112 octets] - [01/06/2014 15:22:24]
AdwCleaner[R1].txt - [5662 octets] - [06/07/2014 20:59:12]
AdwCleaner[R2].txt - [1540 octets] - [24/07/2014 19:07:28]
AdwCleaner[R3].txt - [1500 octets] - [25/07/2014 07:58:33]
AdwCleaner[R4].txt - [1305 octets] - [04/08/2014 17:43:07]
AdwCleaner[S0].txt - [4938 octets] - [01/06/2014 15:31:02]
AdwCleaner[S1].txt - [5018 octets] - [06/07/2014 21:04:25]
AdwCleaner[S2].txt - [1605 octets] - [24/07/2014 19:17:00]
AdwCleaner[S3].txt - [1561 octets] - [25/07/2014 08:06:47]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1605 octets] ##########
 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by robert (administrator) on ROBERT-HP on 04-08-2014 17:54:52
Running from C:\Users\robert\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Syntek America Inc.) C:\Windows\System32\StkCSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(WordWeb Software) C:\Program Files (x86)\WordWeb\wweb32.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [26448 2008-05-24] (NewSoft Technology Corporation)
HKLM-x32\...\Run: [WordWeb] => C:\Program Files (x86)\WordWeb\wweb32.exe [65216 2009-11-08] (WordWeb Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-06-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-11-29] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [googletalk] => C:\Program Files (x86)\Google\Google Talk\googletalk.exe [3739648 2007-01-01] (Google)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [PMSpeed] => C:\Program Files (x86)\NewSoft\Presto! PageManager 9.21\PMSpeed.EXE [120728 2011-11-22] (NewSoft Technology Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-07-23] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\.DEFAULT\...\Run: [EEDSpeedLauncher] => rundll32.exe C:\Windows\system32\eed_ec.dll,SpeedLauncher
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [PlayOn] => C:\Program Files (x86)\MediaMall\PlayOn.exe
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [Google Update] => C:\Users\robert\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-12] (Google Inc.)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [ABBYY Screenshot Reader Bonus] => [X]
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\MountPoints2: {1e45ebb7-03db-11e2-9c5f-101f7415e3e8} - G:\TVRadio.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launch AmbirScan Lite.lnk
ShortcutTarget: Launch AmbirScan Lite.lnk -> C:\Program Files (x86)\Ambir Technology\AmbirScanLite\AmbirScan.exe (Ambir Technology, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocketSCAN II.lnk
ShortcutTarget: DocketSCAN II.lnk -> C:\Program Files (x86)\DocuCap\DocketSCAN II\DocketSCAN.exe (Document Capture Technologies, Inc.)
Startup: C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\robert\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC63CD9B63F57CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://encrypted.google.com/
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM - {DD065C6A-C257-4F8A-B51E-6FB5B03F698F} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {9B97950D-482C-1D79-568F-FC7B9D40C785} URL = http://www.bing.com/search?q={searchTerms}&pc=Z192&form=ZGAIDF&install_date=20110913&iesrc={referrer:source}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {32E7B36C-7960-4A42-B83B-D8AFD0AAEF2B} http://www.iradiopop.com/IRD/INDBrowser.CAB
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {8C2D1BF0-5364-403C-9968-E6E348C6B4FB} http://www.iradiopop.com/IRD/pages/VBIRDPlayer.CAB
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.10

FireFox:
========
FF ProfilePath: C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891
FF NewTab: https://google.com/
FF DefaultSearchEngine: Bing
FF SelectedSearchEngine: Bing
FF Homepage: https://google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_160.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_160.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\robert\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\robert\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\robert\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: MeasureIt - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\5mawl7ec.testx15\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-10]
FF Extension: Integrated Google Calendar - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\intgcal@egarracingteam.com.ar.xpi [2014-07-20]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\a6758pul.default-1395446646891\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-08]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-08]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-08]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-08]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-08]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\optout@google.com.xpi [2014-07-08]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\sendtokindle@amazon.com.xpi [2014-07-08]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-08]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\xwdd7zkt.Default User\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-08]
FF Extension: Forecastfox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-07-09]
FF Extension: Flashblock - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-07-09]
FF Extension: FEBE - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-07-09]
FF Extension: WOT - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-09]
FF Extension: ReminderFox - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-07-09]
FF Extension: Evernote Web Clipper - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\firefoxbookmarkchecker@everhelper.me.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\optout@google.com.xpi [2014-07-09]
FF Extension: No Name - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\sendtokindle@amazon.com.xpi [2014-07-09]
FF Extension: The Addon Bar (restored) - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2014-07-09]
FF Extension: Adblock Plus - C:\Users\robert\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.Defaultnew\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-09]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-06-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-11]
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com [2014-06-11]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-05-21] (Hewlett-Packard Company)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2011-11-29] (Realsil Microelectronics Inc.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [24576 2007-02-12] (Syntek America Inc.)
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 msvad_simple; C:\Windows\System32\drivers\povrtdev.sys [28528 2011-10-17] (MediaMall Technologies, Inc.)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 SQTECH913D; C:\Windows\System32\Drivers\Capt8080.sys [28352 2007-05-22] (Service & Quality Technology.)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [632704 2007-06-28] (Syntek)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-06] (Anchorfree Inc.)
R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2014-05-30] (Rsupport Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:54 - 2014-08-04 17:56 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:54 - 2014-08-04 17:55 - 00000000 ____D () C:\FRST
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 10:33 - 2014-08-03 19:18 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2007-09-20 13:29 - 00869016 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\SmartUI2.ocx
2014-07-29 11:15 - 2014-07-29 11:16 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:07 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:05 - 2010-07-09 16:56 - 00525480 _____ (OLSOFT) C:\Windows\SysWOW64\faxl7.dll
2014-07-29 11:05 - 2010-07-09 16:56 - 00033960 _____ (AXL) C:\Windows\SysWOW64\vPrTXL.dll
2014-07-29 11:05 - 2010-07-09 16:55 - 00083112 _____ (AXL) C:\Windows\SysWOW64\axlAU.dll
2014-07-29 11:05 - 2005-04-29 23:49 - 01118208 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbl8.ocx
2014-07-29 11:05 - 2005-03-18 16:52 - 00565248 _____ (ComponentOne) C:\Windows\SysWOW64\vsflex8l.ocx
2014-07-29 11:05 - 2005-03-11 18:31 - 01064960 _____ (ComponentOne LLC) C:\Windows\SysWOW64\tdbg8.ocx
2014-07-29 11:05 - 2005-03-11 18:30 - 00212992 _____ (ComponentOne LLC) C:\Windows\SysWOW64\xadb8.ocx
2014-07-29 11:05 - 2005-02-15 14:02 - 00348160 _____ (ComponenetOne) C:\Windows\SysWOW64\c1sizer.ocx
2014-07-29 11:05 - 2004-10-06 13:08 - 00606208 _____ (Innovasys) C:\Windows\SysWOW64\btnplus1.ocx
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-28 10:43 - 2014-08-04 17:50 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 11:04 - 2014-08-03 11:07 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:13 - 2014-07-24 20:14 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:02 - 2014-07-24 19:03 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:05 - 2014-07-26 11:00 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-08-04 17:49 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-07-24 16:58 - 2014-07-28 14:43 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:57 - 2014-07-24 16:58 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:57 - 2010-11-22 13:27 - 00147472 _____ (TWAIN Working Group) C:\Windows\SysWOW64\TWAINDSM.dll
2014-07-24 16:56 - 1999-05-06 14:22 - 00027632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CTL3DV2.DLL
2014-07-24 16:54 - 2014-08-04 08:56 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:53 - 2014-07-26 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:23 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-22 18:28 - 2014-08-01 08:37 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-07-22 18:28 - 2014-08-01 08:37 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2014-07-21 12:12 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:13 - 2014-07-21 12:12 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 15:13 - 2014-07-20 15:20 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:26 - 2014-07-20 15:32 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 14:25 - 2014-07-20 15:14 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:23 - 2014-07-13 17:24 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 13:32 - 2014-07-26 13:36 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-12 09:48 - 2014-07-12 12:24 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:46 - 2014-07-12 09:50 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:46 - 2014-07-12 09:48 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-10 15:27 - 2014-07-10 15:29 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 06:26 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 06:26 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 06:26 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 06:26 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 06:26 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 06:26 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 06:26 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 06:26 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 06:26 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 06:25 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 06:25 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 06:25 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 06:25 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 06:25 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 06:25 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 06:25 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 06:25 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 06:25 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 06:25 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 06:25 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 06:25 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 06:25 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 06:25 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 06:25 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 06:25 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 06:25 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 06:25 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 06:25 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 06:25 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 06:25 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 06:25 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 06:25 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 06:25 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 06:25 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 06:25 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 06:25 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 06:25 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 06:25 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 06:25 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 06:25 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 06:25 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 06:25 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 06:25 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 06:25 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 06:25 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 06:25 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 06:25 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 06:25 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-08 22:38 - 2014-07-10 07:43 - 00000000 ____D () C:\Program Files\Recuva
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 21:06 - 2014-07-08 22:46 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 18:30 - 2014-07-08 18:39 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:56 - 2014-08-04 17:54 - 00032199 _____ () C:\Users\robert\Desktop\FRST.txt
2014-08-04 17:55 - 2014-08-04 17:54 - 00000000 ____D () C:\FRST
2014-08-04 17:53 - 2011-09-05 17:48 - 01798154 _____ () C:\Windows\WindowsUpdate.log
2014-08-04 17:52 - 2014-08-04 17:52 - 02094080 _____ (Farbar) C:\Users\robert\Desktop\FRST64.exe
2014-08-04 17:51 - 2014-06-01 15:22 - 00000000 ____D () C:\AdwCleaner
2014-08-04 17:50 - 2014-07-28 10:43 - 00001069 _____ () C:\Users\robert\Documents\Manual.amx
2014-08-04 17:49 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\.oit
2014-08-04 17:49 - 2014-06-03 21:31 - 00004220 _____ () C:\Windows\setupact.log
2014-08-04 17:49 - 2013-07-08 16:24 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-08-04 17:49 - 2012-02-13 14:29 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 17:49 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-04 17:48 - 2014-06-27 20:22 - 00028932 _____ () C:\Windows\PFRO.log
2014-08-04 17:48 - 2013-07-07 07:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-04 17:46 - 2014-08-04 17:46 - 00001685 _____ () C:\Users\robert\Desktop\AdwCleaner[R4].txt
2014-08-04 17:42 - 2014-08-04 17:42 - 01361309 _____ () C:\Users\robert\Downloads\adwcleaner_3.302.exe
2014-08-04 17:35 - 2013-01-10 09:52 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-04 17:32 - 2011-09-12 10:34 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7B9F27E6-27A7-4FD8-AC2B-CD83F2FD8AD2}
2014-08-04 17:18 - 2012-02-13 14:29 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 17:16 - 2012-08-12 15:14 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000UA.job
2014-08-04 14:30 - 2014-08-04 14:30 - 00011240 _____ () C:\Users\robert\Desktop\half-books.xlsx
2014-08-04 11:16 - 2012-08-12 15:14 - 00000860 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3434975647-2719533202-2998227652-1000Core.job
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 11:10 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 08:56 - 2014-07-24 16:54 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-08-04 07:46 - 2014-04-11 13:04 - 00000099 _____ () C:\Users\Public\LMDebug.log
2014-08-03 19:18 - 2014-08-03 10:33 - 00000276 _____ () C:\Users\robert\Desktop\mynotes.txt
2014-08-03 14:17 - 2014-08-03 14:17 - 00000000 ____D () C:\Users\robert\Desktop\Write-Kindle-Book.scriv
2014-08-03 11:07 - 2014-07-26 11:04 - 00000000 ____D () C:\Users\robert\Desktop\PDFs
2014-08-03 09:06 - 2014-08-03 09:06 - 00000676 _____ () C:\Users\robert\Desktop\concise-writing.txt
2014-08-02 17:22 - 2014-08-02 17:22 - 00000000 ____D () C:\Users\robert\Desktop\FreeItemsToSellOnEbay.scriv
2014-08-02 16:29 - 2014-08-02 16:29 - 00002800 _____ () C:\Users\robert\Desktop\Indexcard-Outlining.txt
2014-08-02 14:26 - 2011-09-13 10:05 - 00000000 ____D () C:\Users\robert\Documents\My Digital Editions
2014-08-01 08:37 - 2014-07-22 18:28 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForrobert
2014-08-01 08:37 - 2014-07-22 18:28 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForrobert.job
2014-08-01 07:53 - 2014-08-01 07:53 - 00688992 ____R (Swearware) C:\Users\robert\Desktop\dds.com
2014-07-31 17:38 - 2011-11-01 13:45 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-07-31 17:38 - 2011-09-13 20:48 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-07-30 10:51 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-30 08:25 - 2014-06-11 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\Documents\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TraderXL
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Users\robert\AppData\Local\Trader
2014-07-29 11:16 - 2014-07-29 11:16 - 00000000 ____D () C:\Program Files (x86)\TraderXL
2014-07-29 11:16 - 2014-07-29 11:15 - 03090048 _____ (AnalyzerXL LLC ) C:\Users\robert\Downloads\TraderXL.exe
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnalyzerXL
2014-07-29 11:07 - 2014-07-29 11:05 - 00000000 ____D () C:\Program Files (x86)\AnalyzerXL
2014-07-29 11:05 - 2014-07-29 11:05 - 00000000 ____D () C:\Users\robert\AppData\Local\AnalyzerXL
2014-07-29 11:04 - 2014-07-29 11:04 - 05131600 _____ (OLSoft LLC ) C:\Users\robert\Downloads\AXLe.exe
2014-07-29 10:51 - 2014-06-30 16:02 - 00000837 _____ () C:\Users\Public\Desktop\Medved Trader.lnk
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medved Trader
2014-07-29 10:51 - 2013-12-10 08:55 - 00000000 ____D () C:\Program Files\Medved Trader
2014-07-28 14:43 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\Documents\My PageManager
2014-07-28 10:53 - 2012-09-20 14:09 - 00000000 ____D () C:\Users\robert\Documents\Add-in Express
2014-07-28 10:39 - 2011-09-12 15:18 - 00000000 ____D () C:\Users\robert\AppData\Local\CrashDumps
2014-07-28 10:38 - 2014-07-28 10:38 - 00000000 ____D () C:\Users\robert\Documents\AmbirScanTemp
2014-07-28 10:37 - 2014-07-28 10:37 - 00002771 _____ () C:\Users\Public\Desktop\Launch AmbirScan Lite.lnk
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Users\robert\AppData\Local\Ambir_Technology,_Inc
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ambir Technology
2014-07-28 10:37 - 2014-07-28 10:37 - 00000000 ____D () C:\Program Files (x86)\Ambir Technology
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\Desktop\DISK1
2014-07-28 10:36 - 2014-07-28 10:36 - 00000000 ____D () C:\Users\robert\AppData\Local\Downloaded Installations
2014-07-28 10:14 - 2014-07-28 10:14 - 00000000 ____D () C:\Program Files (x86)\Techinline
2014-07-28 10:13 - 2014-07-28 10:13 - 01907000 _____ () C:\Users\robert\Downloads\Techinline Client.exe
2014-07-28 08:14 - 2009-07-14 01:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-27 18:39 - 2014-06-03 12:41 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 11:29 - 2014-07-27 11:29 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-07-26 16:58 - 2014-07-24 16:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DocuCap
2014-07-26 13:36 - 2014-07-12 13:32 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NAPS2
2014-07-26 11:00 - 2014-07-24 17:05 - 00000000 ____D () C:\Users\robert\AppData\Local\DocuCap
2014-07-25 19:15 - 2014-07-25 19:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\GiliSoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
2014-07-25 19:14 - 2014-07-25 19:14 - 00000000 ____D () C:\Program Files (x86)\Gilisoft
2014-07-25 19:08 - 2014-07-25 19:08 - 13563120 _____ (GiliSoft.com ) C:\Users\robert\Downloads\video-editor_giveaway.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-25 07:36 - 2013-01-10 09:52 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-25 07:36 - 2013-01-10 09:52 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-25 07:35 - 2014-07-25 07:35 - 19190960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-24 20:14 - 2014-07-24 20:13 - 00000000 ____D () C:\Users\robert\Desktop\junk
2014-07-24 19:08 - 2014-07-24 19:08 - 01016261 _____ (Thisisu) C:\Users\robert\Downloads\JRT(1).exe
2014-07-24 19:03 - 2014-07-24 19:02 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\robert\Downloads\rkill.com
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 18:25 - 2013-07-18 13:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 18:22 - 2014-07-24 18:22 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267.msi
2014-07-24 17:38 - 2012-11-24 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 17:28 - 2011-09-12 22:26 - 00000000 ____D () C:\Users\robert
2014-07-24 17:05 - 2014-07-24 17:05 - 00000000 ____D () C:\ProgramData\DocuCap
2014-07-24 16:58 - 2014-07-24 16:58 - 00002133 _____ () C:\Users\Public\Desktop\PageManager 9.21.lnk
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Roaming\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\Users\robert\AppData\Local\NewSoft
2014-07-24 16:58 - 2014-07-24 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 9.21 Standard
2014-07-24 16:58 - 2014-07-24 16:57 - 00000264 _____ () C:\Windows\setup.iss
2014-07-24 16:54 - 2014-07-24 16:54 - 00002931 _____ () C:\Users\robert\Desktop\DocketSCAN II.lnk
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Windows\SysWOW64\color
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\NewSoft
2014-07-24 16:54 - 2014-07-24 16:54 - 00000000 ____D () C:\Program Files (x86)\DocuCap
2014-07-24 16:54 - 2011-06-21 15:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-24 16:52 - 2014-07-24 16:52 - 00000000 ____D () C:\Program Files\DocuCap
2014-07-24 16:24 - 2014-07-24 16:23 - 00000000 ____D () C:\Users\robert\ReminderfoxBUPS
2014-07-23 09:58 - 2014-07-23 09:58 - 00000407 _____ () C:\Users\robert\Desktop\kindle-fire-static-ip.txt
2014-07-21 16:41 - 2011-09-19 11:38 - 00000000 ____D () C:\Users\robert\Documents\OneNote Notebooks
2014-07-21 12:15 - 2014-07-21 12:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-21 12:15 - 2014-07-21 12:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-21 12:15 - 2011-09-12 15:30 - 00000000 ____D () C:\Program Files\Java
2014-07-21 12:13 - 2014-07-21 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-21 12:13 - 2013-10-21 09:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-21 12:12 - 2014-07-21 12:13 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-21 12:12 - 2014-07-21 12:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-21 07:49 - 2012-01-22 11:24 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Skype
2014-07-20 15:32 - 2014-07-20 14:26 - 00000378 _____ () C:\Windows\cdplayer.ini
2014-07-20 15:20 - 2014-07-20 15:13 - 00000000 ____D () C:\Users\robert\Desktop\Org_CD
2014-07-20 15:14 - 2014-07-20 14:25 - 00001534 _____ () C:\ProgramData\ss.ini
2014-07-20 15:12 - 2014-07-20 15:12 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
2014-07-20 14:58 - 2013-07-19 14:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-20 14:25 - 2014-07-20 14:25 - 00000000 ____D () C:\ProgramData\FreeRIP MP3 Converter
2014-07-17 08:15 - 2014-07-17 08:15 - 02142107 _____ (Spacejock Software ) C:\Users\robert\Downloads\yWriter5Full.exe
2014-07-17 08:15 - 2014-07-17 08:15 - 00000971 _____ () C:\Users\robert\Desktop\yWriter5.lnk
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spacejock Software
2014-07-17 08:15 - 2014-07-17 08:15 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-07-17 08:15 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\yWriter5 Sample
2014-07-17 08:12 - 2014-07-17 08:12 - 00000000 ____D () C:\keynotenf
2014-07-14 19:53 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2014-07-13 17:26 - 2014-07-13 17:26 - 00006994 _____ () C:\Windows\DPINST.LOG
2014-07-13 17:24 - 2014-07-13 17:23 - 27476040 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp54841(1).exe
2014-07-13 17:23 - 2014-07-13 17:23 - 11018232 _____ (Hewlett-Packard Company ) C:\Users\robert\Downloads\sp55086(1).exe
2014-07-13 17:20 - 2014-07-13 17:20 - 04583424 _____ () C:\Users\robert\Downloads\HPSupportSolutionsFramework(2).msi
2014-07-12 12:24 - 2014-07-12 09:48 - 00000000 ____D () C:\Users\robert\AppData\Local\ABBYY
2014-07-12 09:50 - 2014-07-12 09:46 - 00000000 ____D () C:\ProgramData\ABBYY
2014-07-12 09:48 - 2014-07-12 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint
2014-07-12 09:48 - 2014-07-12 09:46 - 00000000 ____D () C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2014-07-11 09:12 - 2011-09-12 10:34 - 00000000 ____D () C:\Users\robert\AppData\Roaming\Adobe
2014-07-11 07:09 - 2009-07-14 00:45 - 02955208 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 07:06 - 2014-05-06 22:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 07:06 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 06:49 - 2013-07-12 06:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-11 06:46 - 2011-09-17 08:44 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 20:27 - 2011-09-19 11:40 - 00000000 ____D () C:\Users\robert\Documents\Writing
2014-07-10 15:29 - 2014-07-10 15:27 - 00000000 ____D () C:\Users\robert\Desktop\craig
2014-07-10 07:43 - 2014-07-08 22:38 - 00000000 ____D () C:\Program Files\Recuva
2014-07-09 21:15 - 2014-06-27 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-09 21:15 - 2011-09-13 07:44 - 00000000 ____D () C:\Program Files\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\ProgramData\DivX
2014-07-09 21:15 - 2011-09-13 07:43 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-08 22:46 - 2014-07-08 21:06 - 00000000 ____D () C:\Users\robert\Desktop\old-reminderfox
2014-07-08 22:38 - 2014-07-08 22:38 - 04210920 _____ (Piriform Ltd) C:\Users\robert\Downloads\rcsetup151.exe
2014-07-08 22:17 - 2014-07-08 22:17 - 00000098 _____ () C:\Users\robert\Desktop\dr=appts.txt
2014-07-08 20:07 - 2014-07-08 20:07 - 00000000 ____D () C:\Users\robert\Desktop\a6758pul.default-1395446646891
2014-07-08 19:09 - 2013-07-07 08:08 - 00000000 ____D () C:\FEBEBUS
2014-07-08 18:39 - 2014-07-08 18:30 - 00000000 ____D () C:\Users\robert\Desktop\febeBUPS
2014-07-08 14:14 - 2014-07-08 14:14 - 00991232 _____ () C:\Users\robert\Downloads\MicrosoftFixit50267(1).msi
2014-07-08 13:38 - 2012-05-14 09:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-07-08 08:51 - 2014-07-08 08:51 - 04890736 _____ (Piriform Ltd) C:\Users\robert\Downloads\spsetup126.exe
2014-07-08 08:48 - 2014-07-08 08:48 - 00042340 _____ () C:\Users\robert\Downloads\Result.txt
2014-07-08 08:43 - 2014-07-08 08:43 - 00401920 _____ (Farbar) C:\Users\robert\Downloads\MiniToolBox.exe
2014-07-08 08:40 - 2014-07-08 08:40 - 00854390 _____ () C:\Users\robert\Downloads\SecurityCheck.exe
2014-07-07 20:47 - 2012-02-09 08:10 - 00000000 ____D () C:\Windows\pss
2014-07-07 10:08 - 2011-09-12 18:56 - 00000000 ____D () C:\Program Files (x86)\QuoteTracker2

Some content of TEMP:
====================
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe
C:\Users\robert\AppData\Local\Temp\GsDownload.dll
C:\Users\robert\AppData\Local\Temp\Quarantine.exe
C:\Users\robert\AppData\Local\Temp\_is3A84.exe
C:\Users\robert\AppData\Local\Temp\_is70A1.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 07:10

==================== End Of Log ============================

 

I don't see a way to add attachment of addition.



#7 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 04 August 2014 - 05:40 PM

Okay. Found it. Didn't work the first time I tried it.

Attached Files



#8 nasdaq

nasdaq

  • Malware Response Team
  • 40,200 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:39 AM

Posted 05 August 2014 - 07:45 AM

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
 
start
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [ABBYY Screenshot Reader Bonus] => [X]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com [2014-06-11]
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe
C:\Users\robert\AppData\Local\Temp\GsDownload.dll
C:\Users\robert\AppData\Local\Temp\Quarantine.exe
C:\Users\robert\AppData\Local\Temp\_is3A84.exe
C:\Users\robert\AppData\Local\Temp\_is70A1.exe
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com

End
Save the files as fixlist.txt into the same folder as FRST

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

How is the computer running now?

#9 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 05 August 2014 - 08:58 AM

For some reason, I lost my Internet connection and had to use the troubleshooter to repair after rebooting. Also, Windows is haunting me to update Java. Should I uninstall old version and install updated one?

 

here is the fixlog:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by robert at 2014-08-05 09:49:44 Run:1
Running from C:\Users\robert\Desktop\FRST
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\...\Run: [ABBYY Screenshot Reader Bonus] => [X]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com [2014-06-11]
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe
C:\Users\robert\AppData\Local\Temp\GsDownload.dll
C:\Users\robert\AppData\Local\Temp\Quarantine.exe
C:\Users\robert\AppData\Local\Temp\_is3A84.exe
C:\Users\robert\AppData\Local\Temp\_is70A1.exe
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com

End
*****************

HKU\S-1-5-21-3434975647-2719533202-2998227652-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ABBYY Screenshot Reader Bonus => value deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448" => Key deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com => Moved successfully.
ezSharedSvc => Service deleted successfully.
clwvd => Service deleted successfully.
C:\Users\robert\AppData\Local\Temp\DivXSetup.exe => Moved successfully.
C:\Users\robert\AppData\Local\Temp\GsDownload.dll => Moved successfully.
C:\Users\robert\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\robert\AppData\Local\Temp\_is3A84.exe => Moved successfully.
C:\Users\robert\AppData\Local\Temp\_is70A1.exe => Moved successfully.
"C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com" => File/Directory not found.

==== End of Fixlog ====



#10 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 05 August 2014 - 12:12 PM

I'm noticing every time I shutdown the computer and restart it now, I have to fiddle with troubleshooter to get wireless network working.



#11 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 05 August 2014 - 04:37 PM

I'm sorry BTW. Where are my manners? I forgot to thank you for helping me with this problem. Sorry, it's been one of those weeks.



#12 nasdaq

nasdaq

  • Malware Response Team
  • 40,200 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:39 AM

Posted 06 August 2014 - 08:02 AM

Click the StartBtn.gif button. In the Search box, type Command Prompt, and then, in the list of results, double-click Command Prompt.

at the cursor type:
ipconfig /flushdns <-- (A space between g and / is needed)

repeat with
ipconfig /renew

Then hit Enter, type Exit, hit the Enter key.

You may need to run CMD - Command Prompt on Vista - Windows 7/8 with Elevated Privilege
http://www.bleepingcomputer.com/tutorials/windows-elevated-command-prompt/
<<<>>>

If that fails to resolve the issue continue.
...

Reset all you Browsers.

Reset Chrome...
Click on "Customize and control Google Chrome":
 
p22003758.gif
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Restart Chrome.
====

Firefox:
Reset Default Browsing settings:
https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-problems?utm_expid=65912487-41.djHNRQY0RhaLvvtvcd0BQA.2&utm_referrer=https%3A%2F%2Fwww.google.ca%2F
===

Internet Explorer:
Menu > Tools > Internet Options > General Tab.
Click the Reset button on the bottom of the pane.
Clcik the Apply button.
Close IE.

===

If all fails

How to Reset a Router Back to the Factory Default Settings
http://www.ehow.com/how_2110924_reset-back-factory-default-settings.html

Then, please reconfigure it back to your preferred setting.. Below is the list of default username and password, should you don't know it ;)

http://www.routerpasswords.com/
http://www.phenoelit-us.org/dpl/dpl.html
===

Reset for Linksys, Netgear, D-Link and Belkin Routers
http://www.techsupportforum.com/2763-reset-for-linksys-netgear-d-link-and-belkin-routers/

How to Secure Your Wireless Router
http://www.ehow.com/how_2253625_secure-wireless-router.html

How is it now?
===

p.s.
Lets find out if your Java needs to be updated.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.

If the site is busy or not available use this mirror site:
http://www.bleepingcomputer.com/download/securitycheck/

#13 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 06 August 2014 - 08:21 AM

Hi Nasdaq,

 

on flushdns I got the following message:

No operation can be performed on Wireless Network Connection 2 while it has it media disconnected. No operation can be performed on Local Area connection while it has it's media disconnected. An error occurred while releasing the interface loopback pseudo-interface 1: the system cannot find the file specified. I did the renew, but didn't proceed further with this part.

 

Security test for Java showed I had version 65; they are up to 67, so I uninstalled both 32 and 64-bit versions and updated to version 67.



#14 bonnie848

bonnie848
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:07:39 AM

Posted 06 August 2014 - 08:22 AM

Here is the log from security check:

 

 Results of screen317's Security Check version 0.99.86  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 Java 7 Update 65  
 Adobe Flash Player 14.0.0.160  
 Adobe Reader XI  
 Mozilla Firefox (31.0)
 Google Chrome 35.0.1916.153  
 Google Chrome 36.0.1985.125  
 Google Chrome plugins...  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````
 



#15 nasdaq

nasdaq

  • Malware Response Team
  • 40,200 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:39 AM

Posted 06 August 2014 - 09:05 AM

Security test for Java showed I had version 65; they are up to 67, so I uninstalled both 32 and 64-bit versions and updated to version 67.

Thank you for the information.
===

No operation can be performed on Wireless Network Connection 2 while it has it media disconnected.


Did you know about this 2nd connection?

Do you have two NIC cards on this computer.

How is the computer running now?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users