Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue Screen and Unable to Create Restore Points


  • This topic is locked This topic is locked
64 replies to this topic

#1 MdHelp

MdHelp

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 28 February 2015 - 11:36 PM

Hello,
I have a couple of major problems and I hope someone can PLEASE help me. I have been unable to create System Restore points for quite sometime now. I tried to figure it out for myself but have been unsuccessful. I keep getting a HJT error that my Volumn Shadow Copy is missing ( or my VSSVC.exe file is missing ).
 
Also, almost every week my PC is shutting down with a Blue Screen issue. I have been saving a copy of the Blue Screen errors.
 
I am running:
Windows 7 Home Premium
Gateway/Acer PC
Firefox
IE
 
Also Installed on my PC:
Malwarebytes Anti-Malware
Advanced System Care Ultimate
Norton Internet Security
SpeedZooka
 
I recently ran a DLL scan on my PC using SpeedZooka and the results showed (9) DLL's that were either missing or corrupted. The number behind the DLL is the number of instances the scan saw the specified DLL.
 
api-ms-win-core-winrt-l1-1-0.dll    (4)

api-ms-win-core-winrt-string-l1-1-0.dll    (4)

dwfcore.dll    (1)

dwftoolkit.dll    (1)

majutillib.dll    (4)

nnotes.dll    (3)

w3dtk.dll    (1)

whiptk.dll    (1)

zlib.dll    (2)
 
 
I ran a copy of my HJT log but since I have read in some post that HJT does not truly depict issues for Win 7, I also ran a DDS log for which I will post here. If someome can help me, I will be very appreciative. Thanks in advance. Here is my DDS log.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17631  BrowserJavaVersion: 11.31.2
Run by Winters at 22:53:51 on 2015-02-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.4026.1654 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Advanced SystemCare Ultimate *Disabled/Updated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe
C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Windows\system32\lxebcoms.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe
C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
C:\Program Files (x86)\LastPass\lastapp.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerEvent.exe
C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Winters\Desktop\HijackThis.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:tabs
uSearch Bar = Preserve
mWinlogon: Userinit = userinit.exe,
BHO: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\coieplg.dll
BHO: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ipsbho.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
BHO: Evernote extension: {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll
BHO: Adobe Acrobat Create PDF Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Advanced SystemCare Browser Protection: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
BHO: Adobe Acrobat Create PDF from Selection: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\coieplg.dll
TB: Adobe Acrobat Create PDF Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\coieplg.dll
TB: Adobe Acrobat Create PDF Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll
uRun: [Advanced SystemCare Ultimate] "C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" /Auto
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe /a
mRun: [LastApp] C:\Program Files (x86)\LastPass\lastapp.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\INSTAL~2.LNK - C:\Program Files (x86)\Common Files\lpuninstall.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\INSTAL~1.LNK - C:\Program Files (x86)\Common Files\lpuninstall.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:0
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: LastPass - C:\Users\Winters\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - C:\Users\Winters\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\16474777966696 : DHCPNameServer = 192.168.6.1 64.134.255.2 64.134.255.10
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\457565A503 : DHCPNameServer = 192.168.1.1 71.252.0.12
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\649627563747F6E6560234F6D607C65647560264275656027596D26496 : DHCPNameServer = 8.8.8.8
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\7475 : DHCPNameServer = 192.168.2.1
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\7594E445542535D20534F5E4564777F627B6 : DHCPNameServer = 192.168.2.1
TCP: Interfaces\{2A32EDB9-6DFC-4CD2-B4AD-22CDEDE23B76}\76F6563786 : DHCPNameServer = 4.2.2.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
x64-BHO: ExplorerWnd Helper: {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
x64-BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll
x64-BHO: Adobe Acrobat Create PDF Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll
x64-BHO: Adobe Acrobat Create PDF from Selection: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll
x64-TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll
x64-Run: [Acer ePower Management] c:\program files\gateway\gateway power management\epowertray.exe
x64-Run: [RtHDVCpl] c:\program files\realtek\audio\hda\ravcpl64.exe
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\LastPass\nplastpass.dll
FF - plugin: C:\Program Files (x86)\LastPass\nplastpass64.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Winters\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
============= SERVICES / DRIVERS ===============
.
R0 SmartDefragDriver;SmartDefragDriver;C:\Windows\System32\drivers\SmartDefragDriver.sys [2014-2-13 21184]
R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\NISx64\1109000.00C\symds64.sys [2011-10-11 433200]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\NISx64\1109000.00C\symefa64.sys [2011-10-11 221304]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20150224.001\BHDrvx64.sys [2015-2-25 1622744]
R1 ccHP;Symantec Hash Provider;C:\Windows\System32\drivers\NISx64\1109000.00C\cchpx64.sys [2011-10-11 593544]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20150227.003\IDSviA64.sys [2015-2-27 669400]
R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\NISx64\1109000.00C\ironx64.sys [2011-10-11 150064]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;C:\Windows\System32\drivers\NISx64\1109000.00C\symtdiv.sys [2011-10-11 451704]
R2 {C5F942FD-1110-4664-86CE-0C6BDA305235};Power Control [2014/08/24 16:10:24];C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [2014-3-16 32456]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7;C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [2014-11-25 886592]
R2 ASCAntivirusSrv;AdvancedSystemCareAntivirus;C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAvSvc.exe [2014-11-25 649024]
R2 ePowerSvc;Acer ePower Service;C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe [2009-11-2 844320]
R2 FreeAgentGoNext Service;Seagate Service;C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-5-1 181544]
R2 Greg_Service;GRegService;C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe [2009-8-28 1150496]
R2 HsfXAudioService;HsfXAudioService;C:\Windows\System32\svchost.exe -k HsfXAudioService [2009-7-13 27136]
R2 lxeb_device;lxeb_device;C:\Windows\System32\lxebcoms.exe -service --> C:\Windows\System32\lxebcoms.exe -service [?]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-7-29 1871160]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-7-29 969016]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccsvchst.exe [2011-10-11 126400]
R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe [2009-9-24 62720]
R2 Updater Service;Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [2009-11-2 240160]
R3 CAXHWAZL;CAXHWAZL;C:\Windows\System32\drivers\CAXHWAZL.sys [2009-11-2 292864]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2015-1-12 142640]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;C:\Windows\System32\drivers\IntcHdmi.sys [2009-11-2 139264]
R3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys [2009-11-2 317480]
R3 KeyScrambler;KeyScrambler;C:\Windows\System32\drivers\keyscrambler.sys [2015-1-21 223696]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-7-29 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-7-29 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-7-29 63704]
R3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETw5s64.sys [2010-1-13 7675392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 LiveUpdateSvc;LiveUpdate;C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-16 2635552]
S2 lxebCATSCustConnectService;lxebCATSCustConnectService;C:\Windows\System32\spool\drivers\x64\3\lxebserv.exe [2013-10-16 45736]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-1-2 315488]
S3 androidusb;ADB Interface Driver;C:\Windows\System32\drivers\androidusb.sys [2010-4-29 32768]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2014-7-27 110336]
S3 HTCAND64;HTC Device Driver;C:\Windows\System32\drivers\androidusb.sys [2010-4-29 32768]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2015-2-11 114688]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-3-9 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2009-11-2 225280]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2014-7-27 206080]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-2-13 56832]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-25 1255736]
.
=============== Created Last 30 ================
.
2015-02-25 18:53:57    950272    ----a-w-    C:\Windows\System32\perftrack.dll
2015-02-25 18:53:57    91136    ----a-w-    C:\Windows\System32\wdi.dll
2015-02-25 18:53:57    76800    ----a-w-    C:\Windows\SysWow64\wdi.dll
2015-02-25 18:53:57    29696    ----a-w-    C:\Windows\System32\powertracker.dll
2015-02-23 00:38:05    --------    d-----w-    C:\Program Files (x86)\LastPass
2015-02-22 23:36:12    --------    d-----w-    C:\Users\Winters\AppData\Roaming\RegZooka
2015-02-22 06:08:32    --------    d-----w-    C:\Windows\System32\%LOCALAPPDATA%
2015-02-22 05:21:55    --------    d-----w-    C:\Program Files (x86)\DLL Player
2015-02-16 15:46:44    105760    ----a-w-    C:\Windows\System32\KeyScramblerLogon.dll
2015-02-12 15:32:56    620032    ----a-w-    C:\Windows\SysWow64\jscript9diag.dll
2015-02-12 15:32:56    6041600    ----a-w-    C:\Windows\System32\jscript9.dll
2015-02-12 15:32:56    4300800    ----a-w-    C:\Windows\SysWow64\jscript9.dll
2015-02-12 15:32:55    814080    ----a-w-    C:\Windows\System32\jscript9diag.dll
2015-02-11 13:29:55    229376    ----a-w-    C:\Windows\System32\wintrust.dll
2015-02-11 13:28:31    3201536    ----a-w-    C:\Windows\System32\win32k.sys
2015-02-08 00:42:35    --------    d-----w-    C:\Program Files\Microsoft Mouse and Keyboard Center
.
==================== Find3M  ====================
.
2015-03-01 03:32:16    129752    ----a-w-    C:\Windows\System32\drivers\MBAMSwissArmy.sys
2015-02-24 07:13:42    26674232    ----a-w-    C:\Program Files (x86)\Common Files\lpuninstall.exe
2015-02-07 03:37:18    223696    ----a-w-    C:\Windows\System32\drivers\keyscrambler.sys
2015-02-04 20:42:14    701616    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
2015-02-04 20:42:13    71344    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-04 03:16:29    609280    ----a-w-    C:\Windows\System32\generaltel.dll
2015-02-04 03:16:20    762368    ----a-w-    C:\Windows\System32\invagent.dll
2015-02-04 03:16:16    414720    ----a-w-    C:\Windows\System32\devinv.dll
2015-02-04 03:16:14    894976    ----a-w-    C:\Windows\System32\appraiser.dll
2015-02-04 03:16:13    227328    ----a-w-    C:\Windows\System32\aepdu.dll
2015-02-04 03:16:13    192000    ----a-w-    C:\Windows\System32\aepic.dll
2015-02-04 03:13:28    1098752    ----a-w-    C:\Windows\System32\aeinv.dll
2015-01-29 01:27:22    98216    ----a-w-    C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2015-01-27 23:36:21    1239720    ----a-w-    C:\Windows\System32\aitstatic.exe
2015-01-15 08:14:17    155072    ----a-w-    C:\Windows\System32\drivers\ksecpkg.sys
2015-01-15 08:14:16    95680    ----a-w-    C:\Windows\System32\drivers\ksecdd.sys
2015-01-15 08:09:58    29184    ----a-w-    C:\Windows\System32\sspisrv.dll
2015-01-15 08:09:58    136192    ----a-w-    C:\Windows\System32\sspicli.dll
2015-01-15 08:09:57    28160    ----a-w-    C:\Windows\System32\secur32.dll
2015-01-15 08:09:51    1461760    ----a-w-    C:\Windows\System32\lsasrv.dll
2015-01-15 08:09:15    31232    ----a-w-    C:\Windows\System32\lsass.exe
2015-01-15 08:08:59    64000    ----a-w-    C:\Windows\System32\auditpol.exe
2015-01-15 08:06:22    60416    ----a-w-    C:\Windows\System32\msobjs.dll
2015-01-15 08:06:11    146432    ----a-w-    C:\Windows\System32\msaudite.dll
2015-01-15 08:04:23    686080    ----a-w-    C:\Windows\System32\adtschema.dll
2015-01-15 07:42:59    22016    ----a-w-    C:\Windows\SysWow64\secur32.dll
2015-01-15 07:42:05    50176    ----a-w-    C:\Windows\SysWow64\auditpol.exe
2015-01-15 07:41:53    96768    ----a-w-    C:\Windows\SysWow64\sspicli.dll
2015-01-15 07:39:53    60416    ----a-w-    C:\Windows\SysWow64\msobjs.dll
2015-01-15 07:39:36    146432    ----a-w-    C:\Windows\SysWow64\msaudite.dll
2015-01-15 07:37:55    686080    ----a-w-    C:\Windows\SysWow64\adtschema.dll
2015-01-15 04:22:18    458824    ----a-w-    C:\Windows\System32\drivers\cng.sys
2015-01-14 06:09:27    5554112    ----a-w-    C:\Windows\System32\ntoskrnl.exe
2015-01-14 06:05:30    503808    ----a-w-    C:\Windows\System32\srcore.dll
2015-01-14 06:05:30    50176    ----a-w-    C:\Windows\System32\srclient.dll
2015-01-14 06:04:56    296960    ----a-w-    C:\Windows\System32\rstrui.exe
2015-01-14 05:44:59    3972544    ----a-w-    C:\Windows\SysWow64\ntkrnlpa.exe
2015-01-14 05:44:58    3917760    ----a-w-    C:\Windows\SysWow64\ntoskrnl.exe
2015-01-14 05:41:09    43008    ----a-w-    C:\Windows\SysWow64\srclient.dll
2015-01-13 03:10:22    1424384    ----a-w-    C:\Windows\System32\WindowsCodecs.dll
2015-01-13 02:49:19    1230336    ----a-w-    C:\Windows\SysWow64\WindowsCodecs.dll
2015-01-12 03:05:32    2724864    ----a-w-    C:\Windows\System32\mshtml.tlb
2015-01-12 03:05:19    4096    ----a-w-    C:\Windows\System32\ieetwcollectorres.dll
2015-01-12 02:49:42    66560    ----a-w-    C:\Windows\System32\iesetup.dll
2015-01-12 02:48:57    48640    ----a-w-    C:\Windows\System32\ieetwproxystub.dll
2015-01-12 02:48:52    584192    ----a-w-    C:\Windows\System32\vbscript.dll
2015-01-12 02:47:25    88064    ----a-w-    C:\Windows\System32\MshtmlDac.dll
2015-01-12 02:34:42    144384    ----a-w-    C:\Windows\System32\ieUnatt.exe
2015-01-12 02:34:30    114688    ----a-w-    C:\Windows\System32\ieetwcollector.exe
2015-01-12 02:25:28    968704    ----a-w-    C:\Windows\System32\MsSpellCheckingFacility.exe
2015-01-12 02:21:19    2724864    ----a-w-    C:\Windows\SysWow64\mshtml.tlb
2015-01-12 02:13:27    77824    ----a-w-    C:\Windows\System32\JavaScriptCollectionAgent.dll
2015-01-12 02:08:09    503296    ----a-w-    C:\Windows\SysWow64\vbscript.dll
2015-01-12 02:07:51    62464    ----a-w-    C:\Windows\SysWow64\iesetup.dll
2015-01-12 02:07:06    47616    ----a-w-    C:\Windows\SysWow64\ieetwproxystub.dll
2015-01-12 02:05:36    64000    ----a-w-    C:\Windows\SysWow64\MshtmlDac.dll
2015-01-12 01:55:47    115712    ----a-w-    C:\Windows\SysWow64\ieUnatt.exe
2015-01-12 01:46:29    1359360    ----a-w-    C:\Windows\System32\mshtmlmedia.dll
2015-01-12 01:46:00    2125824    ----a-w-    C:\Windows\System32\inetcpl.cpl
2015-01-12 01:40:43    60416    ----a-w-    C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2015-01-12 01:27:32    2358272    ----a-w-    C:\Windows\System32\wininet.dll
2015-01-12 01:23:09    2052608    ----a-w-    C:\Windows\SysWow64\inetcpl.cpl
2015-01-12 01:22:17    1155072    ----a-w-    C:\Windows\SysWow64\mshtmlmedia.dll
2015-01-12 01:00:17    1888256    ----a-w-    C:\Windows\SysWow64\wininet.dll
2015-01-10 06:48:22    210944    ----a-w-    C:\Windows\System32\wdigest.dll
2015-01-10 06:48:19    86528    ----a-w-    C:\Windows\System32\TSpkg.dll
2015-01-10 06:48:17    341504    ----a-w-    C:\Windows\System32\schannel.dll
2015-01-10 06:48:13    309760    ----a-w-    C:\Windows\System32\ncrypt.dll
2015-01-10 06:48:12    314880    ----a-w-    C:\Windows\System32\msv1_0.dll
2015-01-10 06:48:10    728064    ----a-w-    C:\Windows\System32\kerberos.dll
2015-01-10 06:48:05    22016    ----a-w-    C:\Windows\System32\credssp.dll
2015-01-10 06:27:54    172032    ----a-w-    C:\Windows\SysWow64\wdigest.dll
2015-01-10 06:27:51    65536    ----a-w-    C:\Windows\SysWow64\TSpkg.dll
2015-01-10 06:27:47    248832    ----a-w-    C:\Windows\SysWow64\schannel.dll
2015-01-10 06:27:44    221184    ----a-w-    C:\Windows\SysWow64\ncrypt.dll
2015-01-10 06:27:43    259584    ----a-w-    C:\Windows\SysWow64\msv1_0.dll
2015-01-10 06:27:39    550912    ----a-w-    C:\Windows\SysWow64\kerberos.dll
2015-01-10 06:27:32    17408    ----a-w-    C:\Windows\SysWow64\credssp.dll
2014-12-25 14:33:28    96472    ----a-w-    C:\Windows\System32\drivers\mbamchameleon.sys
2014-12-25 00:14:59    667648    ----a-w-    C:\Windows\SysWow64\sangam.dll
2014-12-25 00:14:52    2034824    ----a-w-    C:\Windows\SysWow64\lcppn30.dll
2014-12-25 00:14:47    541592    ----a-w-    C:\Windows\SysWow64\idrskrn14_5.dll
2014-12-25 00:14:33    3584    ----a-w-    C:\Windows\SysWow64\api-ms-win-core-winrt-error-l1-1-0.dll
2014-12-23 04:05:52    1668    ----a-w-    C:\Windows\System32\ASOROSet.bin
2014-12-19 03:06:55    210432    ----a-w-    C:\Windows\System32\profsvc.dll
2014-12-19 01:46:45    141312    ----a-w-    C:\Windows\System32\drivers\mrxdav.sys
2014-12-17 10:21:49    0    ----a-w-    C:\ZLB4A77.tmp
2014-12-12 05:31:39    1480192    ----a-w-    C:\Windows\System32\crypt32.dll
2014-12-12 05:07:26    1174528    ----a-w-    C:\Windows\SysWow64\crypt32.dll
2014-12-11 17:47:17    87040    ----a-w-    C:\Windows\System32\TSWbPrxy.exe
2014-12-08 22:01:28    20216    ----a-w-    C:\Windows\System32\roboot64.exe
2014-12-08 03:09:05    406528    ----a-w-    C:\Windows\System32\scesrv.dll
2014-12-08 02:46:05    308224    ----a-w-    C:\Windows\SysWow64\scesrv.dll
2014-12-06 04:17:27    303616    ----a-w-    C:\Windows\System32\nlasvc.dll
2014-12-06 03:50:19    52224    ----a-w-    C:\Windows\SysWow64\nlaapi.dll
2014-12-06 03:50:18    156672    ----a-w-    C:\Windows\SysWow64\ncsi.dll
.
============= FINISH: 22:55:02.91 ===============
 
 


The Blue Screen errors I have received basically say the same thing with some minor variation in the codes. My PC just shuts down for by itself
with no warning. Here is the latest shutdown.
 
SHUT DOWN PREMATURELY
2/25/15
 
 
Problem signature:
  Problem Event Name:                     BlueScreen
  OS Version:                                         6.1.7601.2.1.0.768.3
  Locale ID:                                            1033
 
Additional information about the problem:
  BCCode:                                              7a
  BCP1:                                                   FFFFF6FC40006F68
  BCP2:                                                   FFFFFFFFC0000185
  BCP3:                                                   00000000835EC860
  BCP4:                                                   FFFFF88000DED93C
  OS Version:                                         6_1_7601
  Service Pack:                                     1_0
  Product:                                              768_1
 
Files that help describe the problem:
  C:\Windows\Minidump\022515-49233-01.dmp
  C:\Users\Winters\AppData\Local\Temp\WER-495147-0.sysdata.xml
 
Read our privacy statement online:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
 
If the online privacy statement is not available, please read our privacy statement offline:
  C:\Windows\system32\en-US\erofflps.txt


Edited by hamluis, 01 March 2015 - 11:38 AM.
Moved from Win 7 to Malware Removal Logs - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:48 PM

Posted 02 March 2015 - 12:40 PM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:
  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1

Please run a FRST scan. This will help us diagnose your problem.

frst.pngfrstscan.png
Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#3 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 03:44 PM

Hello Jürgen, and thanks for your assistance. As I sated when I made the post, I currently have 2 issues ( Blue Screen problem) and ( Missing Volumn Shadow Copy and cannot create a System Restore Point ) . Will we be working on them both at the same time or one at a time? Per your instructions, here are the logs you requested.

 

- FRST -

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015
Ran by Winters (administrator) on WINTERS-PC on 02-03-2015 15:25:18
Running from C:\Users\Winters\Desktop
Loaded Profiles: Winters &  (Available profiles: Winters & Winters2)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
(IOBit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAvSvc.exe
(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe
(Acer Incorporated) C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe
( ) C:\Windows\System32\lxebcoms.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccsvchst.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
(Acer) C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccsvchst.exe
(Acer Incorporated) C:\Program Files\Gateway\Gateway Power Management\ePowerEvent.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_16_0_0_305_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(LastPass) C:\Users\Winters\AppData\LocalLow\LastPass\LastPassBroker.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Acer ePower Management] => c:\program files\gateway\gateway power management\epowertray.exe [823840 2009-09-30] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] => c:\program files\realtek\audio\hda\ravcpl64.exe [7982112 2009-07-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1157640 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [509216 2015-02-16] (QFX Software Corporation)
HKLM-x32\...\Run: [LastApp] => C:\Program Files (x86)\LastPass\lastapp.exe [29105768 2015-02-18] (LastPass)
HKLM-x32\...\Run: [bdruninstaller] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" /run:"setupdownloader.exe" /args:"/token:tsecurity /after_restart"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe [2529088 2014-04-09] (IObit)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\MountPoints2: {5e678be0-058f-11e1-99ea-0026228a05e9} - F:\Start.exe
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\MountPoints2: {683a51c1-aa09-11df-9ae7-0026228a05e9} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe [2529088 2014-04-09] (IObit)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5e678be0-058f-11e1-99ea-0026228a05e9} - F:\Start.exe
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {683a51c1-aa09-11df-9ae7-0026228a05e9} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe [2529088 2014-04-09] (IObit)
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Gateway.scr [442368 2009-07-30] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:tabs
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKLM-x32 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKLM-x32 -> {E1B5CBE1-FF3D-40F0-A020-1FA1DDFAB1FE} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW
SearchScopes: HKU\.DEFAULT -> {1A72010E-769A-4608-BF01-32B0D33F3D28} URL = http://search.conduit.com/Results.aspx?ctid=CT3300021&SearchSource=45&UM=2&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\.DEFAULT -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-19 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-20 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {42BDE181-19F8-4556-9E45-DD170BDD8CB5} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://searchab.com/?aff=7&uid=13939943-5f2d-11e2-b936-0026228a05e9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {68F7AE23-C4E2-43AB-B576-779816C84A8E} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=541231&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {6F4B3B0A-2AEF-4C84-BBD6-8815EE40C084} URL = http://search.conduit.com/Results.aspx?ctid=CT3300021&SearchSource=45&UM=2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {B225F69D-6365-4399-BF36-B680E7862F54} URL = http://www.hulu.com/search?query={searchTerms}&ref=os
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> {E1B5CBE1-FF3D-40F0-A020-1FA1DDFAB1FE} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW_enUS369
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {42BDE181-19F8-4556-9E45-DD170BDD8CB5} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://searchab.com/?aff=7&uid=13939943-5f2d-11e2-b936-0026228a05e9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {68F7AE23-C4E2-43AB-B576-779816C84A8E} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=541231&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {6F4B3B0A-2AEF-4C84-BBD6-8815EE40C084} URL = http://search.conduit.com/Results.aspx?ctid=CT3300021&SearchSource=45&UM=2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {B225F69D-6365-4399-BF36-B680E7862F54} URL = http://www.hulu.com/search?query={searchTerms}&ref=os
SearchScopes: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {E1B5CBE1-FF3D-40F0-A020-1FA1DDFAB1FE} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW_enUS369
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Symantec NCO BHO -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Symantec Intrusion Prevention -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKU\.DEFAULT -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\.DEFAULT -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-2708263852-2470454145-1182242452-1000: @movenetworks.com/Quantum Media Player -> C:\Users\Winters\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll (Move Networks)
FF Plugin HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @movenetworks.com/Quantum Media Player -> C:\Users\Winters\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll (Move Networks)
FF user.js: detected! => C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdbplug.dll (DNAML Pty Ltd)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\searchplugins\bingp.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\ascsurfingprotection@iobit.com [2014-11-25]
FF Extension: Xmarks - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\foxmarks@kei.com [2015-02-26]
FF Extension: LastPass - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\support@lastpass.com [2015-03-02]
FF Extension: YouTube mp3 - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\info@youtube-mp3.org.xpi [2015-02-02]
FF Extension: ImTranslator - C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-01-29]
FF HKLM-x32\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn_2010_9_0_6 [2015-03-02]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-08-24]
FF HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\Firefox\Extensions: [moveplayer@movenetworks.com] - C:\Users\Winters\AppData\Roaming\Move Networks
FF Extension: Move Media Player - C:\Users\Winters\AppData\Roaming\Move Networks [2010-03-03]
FF HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Firefox\Extensions: [moveplayer@movenetworks.com] - C:\Users\Winters\AppData\Roaming\Move Networks

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [886592 2013-12-16] (IObit)
R2 ASCAntivirusSrv; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe [649024 2014-03-31] (IOBit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2635552 2015-01-15] (IObit)
S2 lxebCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxebserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxeb_device; C:\Windows\system32\lxebcoms.exe [1052328 2010-04-14] ( )
R2 lxeb_device; C:\Windows\SysWOW64\lxebcoms.exe [598696 2010-04-14] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe [126400 2011-08-03] (Symantec Corporation)
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [620544 2008-11-11] (Nokia.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20150224.001\BHDrvx64.sys [1622744 2015-02-02] (Symantec Corporation)
R1 ccHP; C:\Windows\system32\drivers\NISx64\1109000.00C\ccHPx64.sys [593544 2011-08-03] (Symantec Corporation)
S3 dfg; C:\Windows\SysWOW64\drivers\dfg.sys [23552 2014-03-25] (defrag Development Team) [File not signed]
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [32768 2010-04-29] (Google Inc)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20150227.003\IDSvia64.sys [669400 2015-01-30] (Symantec Corporation)
R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [223696 2015-02-06] (QFX Software Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\28910BDB.sys [129752 2015-03-02] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20150301.024\ENG64.SYS [129752 2015-01-20] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20150301.024\EX64.SYS [2137304 2015-01-20] (Symantec Corporation)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1109000.00C\SRTSP64.SYS [505392 2010-04-21] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1109000.00C\SRTSPX64.SYS [32304 2010-04-21] (Symantec Corporation)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2011-06-14] ()
R0 SymDS; C:\Windows\System32\drivers\NISx64\1109000.00C\SYMDS64.SYS [433200 2009-08-29] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1109000.00C\SYMEFA64.SYS [221304 2011-08-21] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [173104 2010-05-04] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1109000.00C\Ironx64.SYS [150064 2010-04-29] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NISx64\1109000.00C\SYMTDIV.SYS [451704 2011-08-21] (Symantec Corporation)
R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [32456 2014-03-16] (CyberLink Corp.)
S3 PTUMWBus; system32\DRIVERS\PTUMWBus.sys [X]
S3 PTUMWCDF; system32\DRIVERS\PTUMWCDF.sys [X]
S3 PTUMWFLT; system32\DRIVERS\PTUMWFLT.sys [X]
S3 PTUMWMdm; system32\DRIVERS\PTUMWMdm.sys [X]
S3 PTUMWNET; system32\DRIVERS\PTUMWNET.sys [X]
S3 PTUMWVsp; system32\DRIVERS\PTUMWVsp.sys [X]
S3 SYMFW; \SystemRoot\System32\Drivers\NISx64\1008000.029\SYMFW.SYS [X]
S3 SYMNDISV; \SystemRoot\System32\Drivers\NISx64\1008000.029\SYMNDISV.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-02 15:25 - 2015-03-02 15:25 - 00035495 _____ () C:\Users\Winters\Desktop\FRST.txt
2015-03-02 15:24 - 2015-03-02 15:25 - 00000000 ____D () C:\FRST
2015-03-02 15:24 - 2015-03-02 15:24 - 02092544 _____ (Farbar) C:\Users\Winters\Desktop\FRST64.exe
2015-03-02 15:07 - 2015-03-02 15:07 - 00001192 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2015-03-02 15:02 - 2015-03-02 15:03 - 14242360 _____ (LastPass) C:\Users\Winters\Desktop\lastpass_x64.exe
2015-03-02 15:00 - 2015-03-02 15:00 - 14242360 _____ (LastPass) C:\Users\Winters\Downloads\lastpass_x64 (1).exe
2015-03-02 08:06 - 2015-03-02 08:06 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\28910BDB.sys
2015-03-01 10:05 - 2015-03-01 10:05 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2015-03-01 09:59 - 2015-03-01 10:00 - 02867616 _____ () C:\Users\Winters\Downloads\bitdefender_tsecurity.exe
2015-03-01 09:40 - 2015-03-01 10:06 - 00000712 _____ () C:\Users\Winters\Desktop\Bit Defender.txt
2015-03-01 01:00 - 2015-03-02 08:05 - 00000224 _____ () C:\Windows\setupact.log
2015-03-01 01:00 - 2015-03-01 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-28 23:04 - 2015-03-01 02:03 - 00000000 ____D () C:\Users\Winters\Desktop\DDS
2015-02-28 22:52 - 2015-02-28 22:52 - 00688992 ____R (Swearware) C:\Users\Winters\Downloads\dds.com
2015-02-28 21:52 - 2015-02-28 22:03 - 00000242 _____ () C:\Users\Winters\Desktop\Missing or Corrupt DLL.txt
2015-02-26 20:13 - 2015-02-26 20:13 - 02904064 _____ () C:\Users\Winters\Downloads\xmarks-installer-for-ie-1.3.15 (1).msi
2015-02-26 20:07 - 2015-02-26 20:07 - 02904064 _____ () C:\Users\Winters\Downloads\xmarks-installer-for-ie-1.3.15.msi
2015-02-26 08:05 - 2015-02-28 11:47 - 00000606 _____ () C:\Users\Winters\Desktop\TEXTS2.txt
2015-02-25 19:49 - 2015-02-25 19:49 - 01548384 _____ (Skype Technologies S.A.) C:\Users\Winters\Downloads\SkypeSetup.exe
2015-02-25 19:31 - 2015-01-08 18:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 19:31 - 2015-01-08 18:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 13:53 - 2015-01-08 22:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-25 13:53 - 2015-01-08 22:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-25 13:53 - 2015-01-08 22:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-25 13:53 - 2015-01-08 21:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-24 14:22 - 2015-02-24 14:46 - 00000120 _____ () C:\Users\Winters\Desktop\CISCO.txt
2015-02-24 12:09 - 2015-02-24 12:09 - 00003136 _____ () C:\Windows\System32\Tasks\{ECAA3B74-A86C-4F39-864E-03C9258F0CBD}
2015-02-24 12:01 - 2015-02-24 12:05 - 00011719 _____ () C:\Users\Winters\Desktop\HT Log 1-24
2015-02-24 11:01 - 2015-02-24 11:13 - 00010657 _____ () C:\Users\Winters\Desktop\LP Report 1-24.txt
2015-02-24 02:12 - 2015-03-02 15:07 - 00000000 ____D () C:\Users\Winters\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2015-02-24 02:12 - 2015-03-02 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2015-02-23 13:06 - 2015-02-23 13:41 - 00000113 _____ () C:\Users\Winters\Desktop\Delaware Cases.txt
2015-02-22 19:38 - 2015-03-02 15:08 - 00000000 ____D () C:\Program Files (x86)\LastPass
2015-02-22 18:47 - 2015-02-22 18:47 - 00010494 _____ () C:\Users\Winters\Desktop\SpeedZooka ASR 2-22.txt
2015-02-22 18:36 - 2015-02-22 18:36 - 00000000 ____D () C:\Users\Winters\AppData\Roaming\RegZooka
2015-02-22 10:58 - 2015-02-22 11:11 - 00000000 ____D () C:\Users\Winters\Desktop\Android
2015-02-22 10:35 - 2015-02-22 10:36 - 00000000 ____D () C:\Users\Winters\Desktop\R M Bomfim
2015-02-22 01:08 - 2015-02-22 01:08 - 00000000 ____D () C:\Windows\system32\%LOCALAPPDATA%
2015-02-22 00:21 - 2015-02-22 00:21 - 00000997 _____ () C:\Users\Winters\Desktop\DLL Player.lnk
2015-02-22 00:21 - 2015-02-22 00:21 - 00000000 ____D () C:\Users\Winters\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DLL Player
2015-02-22 00:21 - 2015-02-22 00:21 - 00000000 ____D () C:\Program Files (x86)\DLL Player
2015-02-21 07:02 - 2015-02-21 13:23 - 00001058 _____ () C:\Users\Winters\Desktop\GARRETT.txt
2015-02-19 11:45 - 2015-02-19 18:05 - 00000429 _____ () C:\Users\Winters\Desktop\Delaware Politicians.txt
2015-02-17 12:03 - 2015-02-17 14:27 - 00001654 _____ () C:\Users\Winters\Desktop\Acupuncture.txt
2015-02-16 10:46 - 2015-02-16 10:46 - 00105760 _____ (QFX Software Corporation) C:\Windows\system32\KeyScramblerLogon.dll
2015-02-15 13:00 - 2015-02-15 13:01 - 00000000 ____D () C:\Users\Winters\Desktop\FRAN
2015-02-15 02:13 - 2015-03-02 13:13 - 00000000 ____D () C:\Users\Winters\Desktop\LEGAL
2015-02-12 22:35 - 2015-02-12 23:12 - 00000197 _____ () C:\Users\Winters\Desktop\Share Money.txt
2015-02-12 10:59 - 2015-02-12 10:59 - 00000041 _____ () C:\Users\Winters\Desktop\CC.txt
2015-02-12 10:32 - 2015-01-22 23:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 10:32 - 2015-01-22 23:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 10:32 - 2015-01-22 22:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 10:32 - 2015-01-22 22:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 15:13 - 2015-02-11 15:16 - 00000000 ____D () C:\Users\Winters\Downloads\ASCU8
2015-02-11 13:38 - 2015-02-11 16:16 - 00000135 _____ () C:\Users\Winters\Desktop\ASCU8.txt
2015-02-11 08:30 - 2015-02-03 22:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 08:30 - 2015-02-03 22:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 08:30 - 2015-02-03 22:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 08:30 - 2015-02-03 22:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 08:30 - 2015-02-03 22:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 08:30 - 2015-02-03 22:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 08:30 - 2015-02-03 22:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 08:30 - 2015-01-27 18:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 08:30 - 2015-01-15 03:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 08:30 - 2015-01-15 03:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 08:30 - 2015-01-15 03:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 08:30 - 2015-01-15 03:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 08:30 - 2015-01-15 03:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 08:30 - 2015-01-15 03:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 08:30 - 2015-01-15 03:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 08:30 - 2015-01-15 03:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 08:30 - 2015-01-15 03:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 08:30 - 2015-01-15 03:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 08:30 - 2015-01-15 03:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 08:30 - 2015-01-15 02:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 08:30 - 2015-01-15 02:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 08:30 - 2015-01-15 02:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 08:30 - 2015-01-15 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 08:30 - 2015-01-15 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 08:30 - 2015-01-15 02:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 08:30 - 2015-01-14 23:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 08:30 - 2015-01-14 00:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 08:30 - 2015-01-14 00:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 08:30 - 2015-01-12 22:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 08:30 - 2015-01-12 21:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 08:30 - 2015-01-11 22:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 08:30 - 2015-01-11 22:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 08:30 - 2015-01-11 22:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 08:30 - 2015-01-11 21:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 08:30 - 2015-01-11 21:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 08:30 - 2015-01-11 21:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 08:30 - 2015-01-11 21:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 08:30 - 2015-01-11 21:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 08:30 - 2015-01-11 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 08:30 - 2015-01-11 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 08:30 - 2015-01-11 21:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 08:30 - 2015-01-11 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 08:30 - 2015-01-11 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 08:30 - 2015-01-11 21:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 08:30 - 2015-01-11 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 08:30 - 2015-01-11 21:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 08:30 - 2015-01-11 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 08:30 - 2015-01-11 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 08:30 - 2015-01-11 21:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 08:30 - 2015-01-11 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 08:30 - 2015-01-11 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 08:30 - 2015-01-11 21:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 08:30 - 2015-01-11 21:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 08:30 - 2015-01-11 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 08:30 - 2015-01-11 21:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 08:30 - 2015-01-11 21:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 08:30 - 2015-01-11 21:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 08:30 - 2015-01-11 20:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 08:30 - 2015-01-11 20:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 08:30 - 2015-01-11 20:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 08:30 - 2015-01-11 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 08:30 - 2015-01-11 20:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 08:30 - 2015-01-11 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 08:30 - 2015-01-11 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 08:30 - 2015-01-11 20:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 08:30 - 2015-01-11 20:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 08:30 - 2015-01-11 20:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 08:30 - 2015-01-11 20:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 08:30 - 2015-01-11 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 08:30 - 2015-01-11 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 08:30 - 2015-01-11 20:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 08:30 - 2015-01-11 20:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 08:30 - 2015-01-11 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 08:30 - 2015-01-11 20:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 08:30 - 2015-01-11 20:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 08:30 - 2015-01-11 20:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 08:30 - 2015-01-11 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 08:30 - 2015-01-11 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 08:30 - 2015-01-11 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 08:30 - 2015-01-11 19:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 08:30 - 2015-01-10 01:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 08:30 - 2015-01-10 01:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 08:29 - 2015-01-14 01:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 08:29 - 2015-01-14 01:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 08:29 - 2015-01-14 01:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 08:29 - 2015-01-14 01:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 08:29 - 2015-01-14 00:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 08:29 - 2015-01-14 00:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 08:29 - 2015-01-14 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 08:29 - 2014-12-12 00:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 08:29 - 2014-12-12 00:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 08:29 - 2014-12-07 22:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 08:29 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 08:29 - 2014-11-25 22:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 08:29 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 08:29 - 2014-07-06 21:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 08:29 - 2014-07-06 21:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 08:29 - 2014-07-06 20:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 08:29 - 2014-07-06 20:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 08:28 - 2015-01-08 21:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-08 17:41 - 2015-02-08 17:41 - 00003380 _____ () C:\Windows\System32\Tasks\ASCAntivirusScan
2015-02-07 19:43 - 2015-02-07 19:43 - 00003118 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2015-02-07 19:43 - 2015-02-07 19:43 - 00003092 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2015-02-07 19:43 - 2015-02-07 19:43 - 00003090 _____ () C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2015-02-07 19:43 - 2015-02-07 19:43 - 00003062 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2015-02-07 19:43 - 2015-02-07 19:43 - 00003060 _____ () C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2015-02-07 19:43 - 2015-02-07 19:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2015-02-07 19:43 - 2015-02-07 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse and Keyboard Center
2015-02-07 19:42 - 2015-02-07 19:42 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2015-02-07 19:42 - 2015-02-07 19:42 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center
2015-02-07 19:39 - 2015-02-07 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2015-02-04 19:18 - 2015-02-04 19:18 - 00000178 _____ () C:\Users\Winters\Desktop\Showbox.txt
2015-02-03 15:44 - 2015-02-03 15:44 - 00064512 _____ () C:\Users\Winters\Downloads\321-petition-rule to show cause 10102011.dot
2015-01-31 07:39 - 2015-02-12 00:34 - 00000000 ____D () C:\Users\Winters\Desktop\VISA

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-02 15:02 - 2014-11-25 12:47 - 00002257 _____ () C:\Users\Public\Desktop\Advanced SystemCare Ultimate 7.lnk
2015-03-02 14:42 - 2014-12-25 16:07 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-02 14:26 - 2014-11-21 08:12 - 01166385 _____ () C:\Windows\WindowsUpdate.log
2015-03-02 08:14 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-02 08:14 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-02 08:08 - 2010-09-19 05:44 - 00000000 ____D () C:\Users\Winters\AppData\Local\CrashDumps
2015-03-02 08:06 - 2014-07-29 01:17 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-02 08:05 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-01 20:29 - 2013-06-18 12:10 - 00000000 ____D () C:\Users\Winters\AppData\Roaming\Skype
2015-03-01 16:16 - 2010-09-02 00:27 - 00025088 _____ () C:\Users\Winters\Documents\Password File.xlsx
2015-03-01 10:07 - 2010-03-04 01:05 - 00000000 ____D () C:\Users\Winters\AppData\Roaming\Azureus
2015-03-01 10:00 - 2014-12-03 10:02 - 00000254 _____ () C:\Windows\Tasks\RegClean Prosch.job
2015-02-28 22:21 - 2015-01-07 12:49 - 00000000 ____D () C:\Users\Winters\Desktop\backups
2015-02-28 22:12 - 2014-12-22 20:17 - 00000000 ____D () C:\Program Files (x86)\SpeedZooka
2015-02-28 20:17 - 2013-08-30 00:05 - 00000000 ____D () C:\Windows\Minidump
2015-02-28 17:01 - 2010-04-27 09:39 - 00000406 ____H () C:\Windows\Tasks\Norton Security Scan for Winters.job
2015-02-28 11:03 - 2011-08-11 08:18 - 00000000 ____D () C:\Users\Winters\Desktop\Misc
2015-02-27 07:18 - 2013-12-16 13:51 - 00000000 ____D () C:\ProgramData\ProductData
2015-02-27 02:05 - 2013-09-01 09:22 - 00786662 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-26 11:52 - 2014-04-28 07:13 - 00000000 ____D () C:\Users\Winters\Desktop\ED Files
2015-02-26 07:59 - 2015-01-21 12:18 - 00000000 ____D () C:\Users\Winters\Desktop\Last Pass
2015-02-26 07:53 - 2013-09-02 10:45 - 00000000 ____D () C:\IObit
2015-02-25 19:51 - 2013-06-18 12:10 - 00000000 ____D () C:\ProgramData\Skype
2015-02-25 19:34 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\tracing
2015-02-24 16:02 - 2010-03-02 17:48 - 00000000 ____D () C:\Users\Winters
2015-02-22 20:52 - 2011-07-17 09:45 - 00000000 ____D () C:\Users\Winters\Desktop\System Restore
2015-02-22 11:04 - 2014-12-06 19:06 - 00000000 ____D () C:\Users\Winters\Desktop\GAMES
2015-02-22 10:37 - 2014-12-25 09:33 - 00000000 ____D () C:\Users\Winters\Desktop\MAL-AR
2015-02-21 17:36 - 2015-01-21 15:47 - 00000000 ____D () C:\Program Files (x86)\KeyScrambler
2015-02-21 17:34 - 2015-01-21 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
2015-02-15 13:05 - 2011-10-28 12:03 - 00000000 ____D () C:\Users\Winters\Desktop\Photos
2015-02-15 13:03 - 2014-08-17 07:38 - 00000000 ____D () C:\Users\Winters\Desktop\AUTO
2015-02-15 12:29 - 2014-11-25 13:02 - 00002890 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Winters
2015-02-12 18:11 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2015-02-12 15:14 - 2014-12-13 00:59 - 00000601 _____ () C:\Users\Winters\Desktop\TEXTS.txt
2015-02-12 10:57 - 2014-11-18 10:32 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 10:55 - 2014-11-18 10:32 - 00000829 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-12 10:09 - 2009-07-13 23:45 - 00428680 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 04:15 - 2014-12-14 13:57 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 04:15 - 2014-06-04 08:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 04:14 - 2014-11-09 15:16 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 04:12 - 2009-11-02 21:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-12 04:04 - 2013-08-14 18:49 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 03:19 - 2010-03-06 09:26 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 11:00 - 2010-09-08 12:42 - 00000000 ____D () C:\Users\Winters\Documents\Documents-Acer
2015-02-11 00:29 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-08 09:47 - 2010-03-02 17:48 - 00114616 _____ () C:\Users\Winters\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-06 22:37 - 2015-01-21 15:47 - 00223696 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys
2015-02-04 15:42 - 2014-12-25 16:07 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 15:42 - 2014-12-25 16:07 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 15:42 - 2014-12-25 16:07 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2014-12-03 01:09 - 2015-03-02 15:08 - 14242360 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2012-04-21 03:28 - 2012-04-21 03:28 - 0007605 _____ () C:\Users\Winters\AppData\Local\Resmon.ResmonCfg
2011-06-14 23:41 - 2012-06-15 08:07 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt
2014-12-21 18:51 - 2014-12-21 18:57 - 0000178 _____ () C:\ProgramData\lxeb.log
2014-10-25 16:41 - 2014-12-21 23:54 - 0011758 _____ () C:\ProgramData\lxebscan.log
2012-10-10 16:48 - 2013-04-15 18:12 - 0000629 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2013-10-16 00:23 - 2013-10-16 00:23 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-23 18:54

==================== End Of Log ============================

 

- Addition -

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-03-2015
Ran by Winters at 2015-03-02 15:26:38
Running from C:\Users\Winters\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Internet Security (Disabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Advanced SystemCare Ultimate (Disabled - Up to date) {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.07 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.9 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced SystemCare Ultimate 7 (HKLM-x32\...\Advanced SystemCare Ultimate_is1) (Version: 7.1.0 - IObit)
Auslogics Duplicate File Finder (HKLM-x32\...\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: 4.0.2.0 - Auslogics Labs Pty Ltd)
Backup Manager Basic (x32 Version: 2.0.0.29 - NewTech Infosystems) Hidden
Belarc Advisor 8.1 (HKLM-x32\...\Belarc Advisor) (Version:  - )
Camtasia Studio 7 (HKLM-x32\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
Core Temp version 0.99.8 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 0.99.8 - Arthur Liberman)
CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.3917.58 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DivX Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.5.0.15 - DivX, LLC)
DLL Player 0.1 (HKLM-x32\...\DLL Player) (Version: 0.1 - )
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
Evernote v. 5.7.2 (HKLM-x32\...\{FB57263E-706F-11E4-A65F-00163E98E7D6}) (Version: 5.7.2.5753 - Evernote Corp.)
File Association Helper (HKLM\...\{C168639F-5810-4EC8-B1E8-0251AA8A771C}) (Version: 1.2.225.65451 - WinZip Computing International, LLC)
File Shredder 2.5 (HKLM\...\File Shredder_is1) (Version:  - WipeSoft)
Gateway InfoCentre (HKLM-x32\...\Gateway InfoCentre) (Version: 3.02.3000 - Gateway Incorporated)
Gateway MyBackup (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.29 - NewTech Infosystems)
Gateway Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3004 - Gateway Incorporated)
Gateway Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3006 - Gateway Incorporated)
Gateway Registration (HKLM-x32\...\Gateway Registration) (Version: 1.02.3006 - Gateway Incorporated)
Gateway ScreenSaver (HKLM-x32\...\Gateway Screensaver) (Version: 1.7.0730 - Gateway Incorporated)
Gateway Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3017 - Gateway Incorporated)
HD Video Converter Factory Pro (HKLM-x32\...\HDVideoConverterFactoryPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)
HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.4.56 - Conexant Systems)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Gateway Incorporated)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1892 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Keylogger Detector (HKLM-x32\...\Keylogger Detector) (Version:  - )
KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.6.0.0 - QFX Software Corporation)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)
LastPass for Applications (HKLM-x32\...\LastApp) (Version:  - LastPass)
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.04 - Gateway)
Lexmark Printable Web (HKLM-x32\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro200-S500 Series (HKLM\...\Lexmark Pro200-S500 Series) (Version:  - Lexmark International, Inc.)
Magic ISO Maker v5.5 (build 0274) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0274)) (Version:  - )
MagicDisc 2.7.106 (HKLM-x32\...\MagicDisc 2.7.106) (Version:  - )
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
ManageMyMobile (HKLM-x32\...\ManageMyMobile_is1) (Version: 1.0 - IObit)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Move Media Player (HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\Move Media Player) (Version:  - Move Networks)
Move Media Player (HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Move Media Player) (Version:  - Move Networks)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 33.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 en-US)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 17.9.0.12 - Symantec Corporation)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 3.0.1.8 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
PC Connectivity Solution (HKLM-x32\...\{34610DE0-3C13-42CA-8E32-01FFA38AB6E8}) (Version: 8.47.7.0 - Nokia)
Process Hacker 2.33 (r5590) (HKLM\...\Process_Hacker2_is1) (Version: 2.33.0.5590 - wj32)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5904 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30104 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung Samples Installer (HKLM-x32\...\{7AC15160-A49B-4A89-B181-D4619C025FFF}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
SamsungConnectivityCableDriver (HKLM-x32\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
Seagate Manager Installer (HKLM-x32\...\InstallShield_{E6F019F1-DFB6-4853-A87D-6E31624755A9}) (Version: 2.02.0109 - Seagate)
Seagate Manager Installer (x32 Version: 2.02.0109 - Seagate) Hidden
SeaTools for Windows (HKLM-x32\...\SeaTools for Windows) (Version:  - Seagate Technology)
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.3 - IObit)
Snagit 11 (HKLM-x32\...\{7CA5C4DF-8327-4035-AE2B-CA76336A04FD}) (Version: 11.0.0 - TechSmith Corporation)
Software Informer 1.1 (HKLM-x32\...\Software Informer_is1) (Version:  - Informer Technologies, Inc.)
SpeedZooka (HKLM-x32\...\SpeedZooka) (Version: 4.55.14 - ZookaWare)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.4.0 - Synaptics Incorporated)
TopArcadeHits (HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\...\{C1C3E833-420E-4D78-9BA7-86AEBB272384}) (Version:  - TopArcadeHits)
TopArcadeHits (HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\{C1C3E833-420E-4D78-9BA7-86AEBB272384}) (Version:  - TopArcadeHits)
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden
Video Web Camera (HKLM-x32\...\{6D9021DC-CF1B-4148-8C80-6D8E8A8A33EB}) (Version: 0.5.11.1 - SuYin)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.5.0.0 - Azureus Software, Inc.)
Welcome Center (HKLM-x32\...\Gateway Welcome Center) (Version: 1.00.3009 - Gateway Incorporated)
Windows Driver Package - Broadcom Bluetooth  (06/15/2009 6.2.0.9000) (HKLM\...\6B8550A319DDC8B17F35F4A89988705E4592349B) (Version: 06/15/2009 6.2.0.9000 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (HKLM\...\6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Driver Package - Google, Inc. AndroidUsbDeviceClass  (08/27/2012 7.0.0000.00001) (HKLM\...\6803A5C44482B015766CD85EAE73F57DAB0CD2D1) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
Windows Driver Package - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinZip 19.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E5}) (Version: 19.0.11293 - WinZip Computing, S.L. )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points  =========================

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2015-02-12 00:16 - 00001201 ___RA C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 speedanalysis.net www.speedanalysis.net
127.0.0.1       danjur.com www.danjur.com
127.0.0.1       lpmxp2117.com www.lpmxp2117.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 suggestqueries.google.com

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0BB5752C-8139-459A-9581-5B4402F7E3F9} - System32\Tasks\Symantec\Symantec Error Analyzer 17.9.0.12 => C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\SymErr.exe [2011-09-19] (Symantec Corporation)
Task: {11A9B798-23E5-45EF-8493-126809111D63} - System32\Tasks\{086451CB-8A0A-49B0-A27F-399F42FA18E8} => Firefox.exe
Task: {12C8EECB-C900-4489-82DE-2DC94DDFAA2E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {19B94041-DE4A-4A56-8170-BE9904DEA552} - System32\Tasks\Driver Booster SkipUAC (Winters) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {270C1A93-015A-4725-AB52-3520FFEC9BD3} - System32\Tasks\{66864C32-3D6E-46D9-9E8E-8AE1A9953E6E} => pcalua.exe -a "C:\Users\Winters\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDB25N1S\JavaSetup8u25.com" -d C:\Users\Winters\Desktop
Task: {36625FF2-74D2-4E61-88AF-BE4F84EC977E} - System32\Tasks\{BFC2E3C3-17B6-45F9-AF6F-164DC4BDA2A9} => pcalua.exe -a C:\Users\Winters\Downloads\camtasia.exe -d C:\Users\Winters\Downloads
Task: {3D57DF2A-75B6-41CA-8A6A-82795EF22835} - System32\Tasks\Norton Security Scan for Winters => C:\Program Files (x86)\Norton Security Scan\Engine\3.0.1.8\Nss.exe [2012-04-03] (Symantec Corporation)
Task: {414B4E52-505F-4891-A54F-289BD4ACD223} - System32\Tasks\{F898BB63-1EB0-4E76-A30A-80FD802AF787} => C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\uiStub.exe
Task: {4C6241D9-4448-4139-95F0-7BF8D792843D} - System32\Tasks\Symantec\Symantec Error Processor 17.9.0.12 => C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\SymErr.exe [2011-09-19] (Symantec Corporation)
Task: {524EE9A6-EA46-41ED-A4C9-EC040C162007} - System32\Tasks\Uninstaller_SkipUac_Winters => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-15] (IObit)
Task: {5898EE99-DFC3-446A-8F8F-4200B3DA16EF} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-15] (IObit)
Task: {65AB6E43-658D-44CA-B115-5B1CEF6CD63A} - System32\Tasks\{9480F3EE-E17B-436B-9C69-D58159ED99E6} => Firefox.exe
Task: {6C04B446-6B40-47B8-BC20-907D0E7AF8DA} - System32\Tasks\{942B3E93-4610-4263-90CF-A605D3E1F41D} => Firefox.exe
Task: {707FFA0A-759E-4CAA-A3E4-F5FA56F22833} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {70CA557C-9163-4F33-843C-2AC0FE906386} - \RegClean Pro_DEFAULT No Task File <==== ATTENTION
Task: {8B62C8FD-FAEB-416C-A905-2B2E53CE9F68} - System32\Tasks\{ECAA3B74-A86C-4F39-864E-03C9258F0CBD} => pcalua.exe -a C:\Users\Winters\Desktop\HijackThis.exe -d C:\Users\Winters\Desktop
Task: {930FEC1E-CAC1-4E78-B464-E21DE81A6AC0} - \TopArcadeHits No Task File <==== ATTENTION
Task: {9851391B-740B-43B7-9D86-68FF32A867AC} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {99FB44FD-8739-4CB9-A5E7-B86AB6A4C327} - \RegClean Pro No Task File <==== ATTENTION
Task: {9A283CFC-8D2E-46BA-A64B-8521079C4AC0} - System32\Tasks\{CFBEB359-4F75-4884-A8B1-EF68D0C2CF6E} => Firefox.exe
Task: {9D1F89EF-5F21-40DB-97B7-94CFD5C12E7F} - System32\Tasks\DTReg => C:\Windows\system32\config\systemprofile\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe <==== ATTENTION
Task: {A54E0512-B1A1-4CF9-AF6C-CED48A86CA40} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: {AB628C4C-F6D4-49F6-A631-C8FF8FA07DF7} - System32\Tasks\DTChk => C:\Users\Public\Util\DTChk.exe [2014-05-13] (Search Results, LLC) <==== ATTENTION
Task: {B5F18712-6CA8-403A-AD75-6049FCB0F50F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {B6708AFF-A6C3-4522-B242-BF51D391B3DD} - System32\Tasks\{0B338B17-BF49-4AD5-8D33-2119B50711E6} => pcalua.exe -a D:\Install.exe -d D:\
Task: {BD36FC3F-EC7C-46CF-9A63-3B7F6C09EEDA} - System32\Tasks\ASCAntivirusScan => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASC.exe [2014-04-01] (IObit)
Task: {CB52915D-5431-4DFD-8F70-D13B22C0CC8E} - System32\Tasks\RegClean Prosch => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: {CDAB480F-566A-42A1-B28A-FD0EAA57F163} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {DA231E48-BDE0-4DDA-B856-0748902D6178} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-07-23] (IObit)
Task: {DA254848-8E31-4EB7-BD3C-44B2BC352141} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {DF235F34-5998-4627-A41C-CDBC9569A4B4} - System32\Tasks\{BF2AB4F8-5E8E-414E-9E05-D2A2A175E98F} => pcalua.exe -a "D:\PC Studio\SetupSelector.exe" -d "D:\PC Studio"
Task: {EA0CBDBF-4B0A-462B-952D-D84D1BEC864B} - System32\Tasks\{76E9C9CD-69E1-4DC9-98E7-1A87DDAD313B} => pcalua.exe -a D:\Install.exe -d D:\
Task: {EDE06624-8C86-4EB6-8993-C30748247B6F} - System32\Tasks\ASC7U_SkipUac_Winters => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASC.exe [2014-04-01] (IObit)
Task: {F3A83C63-A35E-458A-9B92-805A9C6C8CEB} - \GPUP No Task File <==== ATTENTION
Task: {F460F097-C21A-4744-A129-0CACBDD76B9C} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe [2014-02-24] (IObit)
Task: {F6D69570-1A25-45E2-986C-070855DBDF5B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {F9FF6297-03EF-482E-A4A7-FE31E28CE727} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {FFCC17B2-7421-44BD-8338-17D5A47F9E45} - System32\Tasks\{B54AA4EF-72EF-4995-A4CE-8272EDA58DA3} => pcalua.exe -a C:\Users\Winters\Downloads\HijackThis.exe -d C:\Users\Winters\Downloads
Task: {FFDBC4DA-24E5-4620-A83E-C694FC115A96} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Norton Security Scan for Winters.job => C:\PROGRA~2\NORTON~3\Engine\301~1.8\Nss.exe
Task: C:\Windows\Tasks\RegClean Prosch.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2013-10-16 00:59 - 2009-11-04 07:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxebdrpp.dll
2010-01-09 19:17 - 2010-01-09 19:17 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:40 - 2010-01-21 00:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-06-07 11:24 - 2012-03-29 09:03 - 02689536 _____ () C:\Program Files\File Shredder\fsshell.dll
2014-05-12 04:49 - 2014-05-12 04:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-11-25 12:47 - 2013-01-15 18:47 - 00517440 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\sqlite3.dll
2014-11-25 12:47 - 2013-11-14 16:02 - 00218944 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Antivirus\bdfltlib.dll
2014-11-25 12:47 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\madExcept_.bpl
2014-11-25 12:47 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\madBasic_.bpl
2014-11-25 12:47 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\madDisAsm_.bpl
2014-11-25 12:47 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\webres.dll
2009-02-02 20:33 - 2009-02-02 20:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\sqlite3.dll
2008-09-28 20:55 - 2008-09-28 20:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\ACE.dll
2010-01-09 19:18 - 2010-01-09 19:18 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:34 - 2010-01-21 00:34 - 08793952 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2708263852-2470454145-1182242452-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Winters\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2708263852-2470454145-1182242452-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Winters\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2708263852-2470454145-1182242452-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Winters2\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass FF RunOnce.lnk => C:\Windows\pss\Install LastPass FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass IE RunOnce.lnk => C:\Windows\pss\Install LastPass IE RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Winters^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk => C:\Windows\pss\EvernoteClipper.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: BackupManagerTray => "c:\program files (x86)\newtech infosystems\gateway mybackup\backupmanagertray.exe" -h -k
MSCONFIG\startupreg: BCSSync => "c:\program files (x86)\microsoft office\office14\bcssync.exe" /delayservices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DivXUpdate => "c:\program files (x86)\divx\divx update\divxupdate.exe" /checknow
MSCONFIG\startupreg: EzPrint => "C:\Program Files (x86)\Lexmark Pro200-S500 Series\ezprint.exe"
MSCONFIG\startupreg: FAHConsole => C:\Program Files\File Association Helper\FAHConsole.exe
MSCONFIG\startupreg: KiesPreload => c:\program files (x86)\samsung\kies\kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => c:\program files (x86)\samsung\kies\kiestrayagent.exe
MSCONFIG\startupreg: LastApp => C:\Program Files (x86)\LastPass\lastapp_x64.exe
MSCONFIG\startupreg: lxebmon.exe => "C:\Program Files (x86)\Lexmark Pro200-S500 Series\lxebmon.exe"
MSCONFIG\startupreg: MaxMenuMgr => c:\program files (x86)\seagate\seagatemanager\freeagent status\stxmenumgr.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder =>
MSCONFIG\startupreg: PDVD9LanguageShortcut => c:\program files (x86)\cyberlink\powerdvd9\language\language.exe
MSCONFIG\startupreg: PowerDVD14Agent => "C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe"
MSCONFIG\startupreg: RemoteControl9 => c:\program files (x86)\cyberlink\powerdvd9\pdvd9serv.exe
MSCONFIG\startupreg: Software Informer =>
MSCONFIG\startupreg: VideoWebCamera => "c:\program files (x86)\videowebcamera\videowebcamera.exe" -a
MSCONFIG\startupreg: vProt =>
MSCONFIG\startupreg: Wondershare Helper Compact.exe => c:\program files (x86)\common files\wondershare\wondershare helper compact\wshelper.exe
MSCONFIG\startupreg: WSHelperSetup.exe => c:\program files (x86)\common files\wondershare\wondershare helper compact\wshelper.exe

==================== Accounts: =============================

Administrator (S-1-5-21-2708263852-2470454145-1182242452-500 - Administrator - Disabled)
Guest (S-1-5-21-2708263852-2470454145-1182242452-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2708263852-2470454145-1182242452-1002 - Limited - Enabled)
Winters (S-1-5-21-2708263852-2470454145-1182242452-1000 - Administrator - Enabled) => C:\Users\Winters
Winters2 (S-1-5-21-2708263852-2470454145-1182242452-1004 - Administrator - Enabled) => C:\Users\Winters2

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (03/02/2015 09:23:08 AM) (Source: System Restore) (EventID: 8211) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x80042308).

Error: (03/02/2015 09:23:08 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80042308).

Error: (03/02/2015 09:23:07 AM) (Source: VSS) (EventID: 12305) (User: )
Description: Volume Shadow Copy Service error: Volume/disk not connected or not found.
Error context: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000005C,0x00560038,00000000001D4C30,0,00000000001D3C20,4096,[0]).

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

Error: (03/02/2015 08:07:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbam.exe, version: 1.0.1.711, time stamp: 0x542b53ec
Faulting module name: mbamcore.dll, version: 1.1.20.0, time stamp: 0x5425b0dd
Exception code: 0xc0000005
Fault offset: 0x00071a08
Faulting process id: 0xa4c
Faulting application start time: 0xmbam.exe0
Faulting application path: mbam.exe1
Faulting module path: mbam.exe2
Report Id: mbam.exe3

Error: (02/28/2015 05:13:46 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x80042308).

Error: (02/28/2015 05:13:46 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80042308).

Error: (02/28/2015 05:13:45 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volume Shadow Copy Service error: Volume/disk not connected or not found.
Error context: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000005C,0x00560038,0000000000304A10,0,0000000000303A00,4096,[0]).

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

Error: (02/27/2015 09:32:04 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x80042308).

Error: (02/27/2015 09:32:04 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80042308).

Error: (02/27/2015 09:32:02 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volume Shadow Copy Service error: Volume/disk not connected or not found.
Error context: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000012C,0x00560038,00000000002847F0,0,00000000002837E0,4096,[0]).

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

System errors:
=============
Error: (03/02/2015 03:21:40 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:21:40 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:21:40 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:21:40 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:21:40 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:10:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:10:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:10:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:10:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Error: (03/02/2015 03:10:39 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort0.

Microsoft Office Sessions:
=========================
Error: (03/02/2015 09:23:08 AM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x80042308

Error: (03/02/2015 09:23:08 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80042308

Error: (03/02/2015 09:23:07 AM) (Source: VSS) (EventID: 12305) (User: )
Description: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000005C,0x00560038,00000000001D4C30,0,00000000001D3C20,4096,[0])

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

Error: (03/02/2015 08:07:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.1.711542b53ecmbamcore.dll1.1.20.05425b0ddc000000500071a08a4c01d054e998d55e13C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\mbamcore.dll17471ead-c0dd-11e4-b6eb-0026228a05e9

Error: (02/28/2015 05:13:46 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x80042308

Error: (02/28/2015 05:13:46 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80042308

Error: (02/28/2015 05:13:45 PM) (Source: VSS) (EventID: 12305) (User: )
Description: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000005C,0x00560038,0000000000304A10,0,0000000000303A00,4096,[0])

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

Error: (02/27/2015 09:32:04 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x80042308

Error: (02/27/2015 09:32:04 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationScheduled Checkpoint0x80042308

Error: (02/27/2015 09:32:02 PM) (Source: VSS) (EventID: 12305) (User: )
Description: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000012C,0x00560038,00000000002847F0,0,00000000002837E0,4096,[0])

Operation:
   Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider

==================== Memory info ===========================

Processor: Intel® Core™2 Duo CPU T6600 @ 2.20GHz
Percentage of memory in use: 56%
Total physical RAM: 4025.98 MB
Available physical RAM: 1750.1 MB
Total Pagefile: 8050.15 MB
Available Pagefile: 5497.6 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Gateway) (Fixed) (Total:453.66 GB) (Free:327.06 GB) NTFS
Drive e: (Acrobat XI Pro) (CDROM) (Total:0.72 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 5043A32C)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=102 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================



#4 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:48 PM

Posted 02 March 2015 - 04:10 PM

Hi,
both at the same time. :)

Step 1

Please download TDSStdsskiller.pngiller and save it to your Desktop.
  • Start tdsskiller.exe with administrator privileges.
  • Accept the EULA and the KSN Statement.
  • Click on Change parameters. (1)
  • Make sure that all available options (except "Loaded modules") are checked and click OK. (2)
  • Click on Start scan.
  • If any threats are found don't delete them but choose the Skip option for all of them.
  • Click on Report (3) to open the log file. (It is also saved at C:\TDSSKiller.<version_date_time>_log.txt).
    Copy and paste its contents in your next reply.
tdss.gif
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#5 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 05:05 PM

Done per our request. 483 objects scanned.  NO THREATS FOUND.



#6 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:48 PM

Posted 02 March 2015 - 05:07 PM

Please post the log as instructed.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#7 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 05:11 PM

16:56:14.0261 0x0508 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04

16:56:33.0575 0x0508 ============================================================

16:56:33.0575 0x0508 Current date / time: 2015/03/02 16:56:33.0575

16:56:33.0575 0x0508 SystemInfo:

16:56:33.0575 0x0508

16:56:33.0575 0x0508 OS Version: 6.1.7601 ServicePack: 1.0

16:56:33.0575 0x0508 Product type: Workstation

16:56:33.0575 0x0508 ComputerName: WINTERS-PC

16:56:33.0575 0x0508 UserName: Winters

16:56:33.0576 0x0508 Windows directory: C:\Windows

16:56:33.0576 0x0508 System windows directory: C:\Windows

16:56:33.0576 0x0508 Running under WOW64

16:56:33.0576 0x0508 Processor architecture: Intel x64

16:56:33.0576 0x0508 Number of processors: 2

16:56:33.0576 0x0508 Page size: 0x1000

16:56:33.0576 0x0508 Boot type: Normal boot

16:56:33.0576 0x0508 ============================================================

16:56:35.0848 0x0508 KLMD registered as C:\Windows\system32\drivers\15570382.sys

16:56:36.0140 0x0508 System UUID: {3C34C0F2-788F-7BEC-F78D-94AA8CBD3480}

16:56:36.0852 0x0508 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:56:36.0861 0x0508 ============================================================

16:56:36.0861 0x0508 \Device\Harddisk0\DR0:

16:56:36.0861 0x0508 MBR partitions:

16:56:36.0861 0x0508 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1801F5F, BlocksNum 0x32FCD

16:56:36.0861 0x0508 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1834F2C, BlocksNum 0x38B50904

16:56:36.0861 0x0508 ============================================================

16:56:36.0895 0x0508 C: <-> \Device\Harddisk0\DR0\Partition2

16:56:36.0895 0x0508 ============================================================

16:56:36.0895 0x0508 Initialize success

16:56:36.0895 0x0508 ============================================================

16:59:02.0656 0x11bc ============================================================

16:59:02.0656 0x11bc Scan started

16:59:02.0656 0x11bc Mode: Manual; SigCheck; TDLFS;

16:59:02.0656 0x11bc ============================================================

16:59:02.0656 0x11bc KSN ping started

16:59:17.0408 0x11bc KSN ping finished: true

16:59:20.0666 0x11bc ================ Scan system memory ========================

16:59:20.0666 0x11bc System memory - ok

16:59:20.0666 0x11bc ================ Scan services =============================

16:59:20.0820 0x11bc [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

16:59:20.0941 0x11bc 1394ohci - ok

16:59:20.0987 0x11bc [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys

16:59:21.0036 0x11bc ACPI - ok

16:59:21.0094 0x11bc [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

16:59:21.0184 0x11bc AcpiPmi - ok

16:59:21.0280 0x11bc [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

16:59:21.0334 0x11bc AdobeARMservice - ok

16:59:21.0463 0x11bc [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

16:59:21.0540 0x11bc AdobeFlashPlayerUpdateSvc - ok

16:59:21.0588 0x11bc [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys

16:59:21.0653 0x11bc adp94xx - ok

16:59:21.0700 0x11bc [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys

16:59:21.0759 0x11bc adpahci - ok

16:59:21.0789 0x11bc [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys

16:59:21.0822 0x11bc adpu320 - ok

16:59:21.0966 0x11bc [ 7D3F50077C8265827C44755737E5EF5F, B652ED68EF652B45980E696C5E4A29BBF4A588D4F4ACF0FAFB042324558A2D90 ] AdvancedSystemCareService7 C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe

16:59:22.0056 0x11bc AdvancedSystemCareService7 - ok

16:59:22.0078 0x11bc [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

16:59:22.0137 0x11bc AeLookupSvc - ok

16:59:22.0191 0x11bc [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys

16:59:22.0292 0x11bc AFD - ok

16:59:22.0323 0x11bc [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys

16:59:22.0351 0x11bc agp440 - ok

16:59:22.0382 0x11bc [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe

16:59:22.0448 0x11bc ALG - ok

16:59:22.0486 0x11bc [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys

16:59:22.0555 0x11bc aliide - ok

16:59:22.0587 0x11bc [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys

16:59:22.0652 0x11bc amdide - ok

16:59:22.0678 0x11bc [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys

16:59:22.0721 0x11bc AmdK8 - ok

16:59:22.0743 0x11bc [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys

16:59:22.0784 0x11bc AmdPPM - ok

16:59:22.0822 0x11bc [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys

16:59:22.0890 0x11bc amdsata - ok

16:59:22.0928 0x11bc [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys

16:59:22.0988 0x11bc amdsbs - ok

16:59:23.0018 0x11bc [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys

16:59:23.0076 0x11bc amdxata - ok

16:59:23.0108 0x11bc [ 363571BC0C79E394E69300D1F2E3DDAE, 4C9DDB848900081D95C14026B0E7B84419867685506E616E1FDA1B79B1FD224B ] androidusb C:\Windows\system32\Drivers\androidusb.sys

16:59:23.0189 0x11bc androidusb - ok

16:59:23.0233 0x11bc [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys

16:59:23.0382 0x11bc AppID - ok

16:59:23.0415 0x11bc [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll

16:59:23.0509 0x11bc AppIDSvc - ok

16:59:23.0544 0x11bc [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll

16:59:23.0592 0x11bc Appinfo - ok

16:59:23.0617 0x11bc [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys

16:59:23.0677 0x11bc arc - ok

16:59:23.0697 0x11bc [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys

16:59:23.0726 0x11bc arcsas - ok

16:59:23.0786 0x11bc [ C6737AD65BD0ACC63F267ECA5FCCC6E7, E8BD9BFAB3B67EF59A3C12CBEBBB07FC0C7DC1140A37F043D7EEDCFE9E231FCB ] ASCAntivirusSrv C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe

16:59:23.0878 0x11bc ASCAntivirusSrv - ok

16:59:24.0003 0x11bc [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

16:59:24.0112 0x11bc aspnet_state - ok

16:59:24.0127 0x11bc [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

16:59:24.0177 0x11bc AsyncMac - ok

16:59:24.0213 0x11bc [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys

16:59:24.0253 0x11bc atapi - ok

16:59:24.0324 0x11bc [ E857EEE6B92AAA473EBB3465ADD8F7E7, 1C7E4737E649A025B3C4974A4F7D1353EAB85561FC8ED54E5C22A777E1A189B3 ] athr C:\Windows\system32\DRIVERS\athrx.sys

16:59:24.0419 0x11bc athr - ok

16:59:24.0480 0x11bc [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:59:24.0529 0x11bc AudioEndpointBuilder - ok

16:59:24.0550 0x11bc [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll

16:59:24.0593 0x11bc AudioSrv - ok

16:59:24.0638 0x11bc [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll

16:59:24.0724 0x11bc AxInstSV - ok

16:59:24.0770 0x11bc [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys

16:59:24.0850 0x11bc b06bdrv - ok

16:59:24.0881 0x11bc [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

16:59:24.0941 0x11bc b57nd60a - ok

16:59:24.0968 0x11bc [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll

16:59:25.0041 0x11bc BDESVC - ok

16:59:25.0068 0x11bc [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys

16:59:25.0165 0x11bc Beep - ok

16:59:25.0231 0x11bc [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll

16:59:25.0294 0x11bc BFE - ok

16:59:25.0571 0x11bc [ 99EE5EB9FCBAD85F1992C47C5BB68649, 604B618F0106B09207B262E22E70E152C4104FB2602C009F19EBEB342D0E9CE7 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20150224.001\BHDrvx64.sys

16:59:25.0745 0x11bc BHDrvx64 - ok

16:59:25.0834 0x11bc [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll

16:59:25.0919 0x11bc BITS - ok

16:59:25.0933 0x11bc [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys

16:59:25.0974 0x11bc blbdrive - ok

16:59:26.0015 0x11bc [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

16:59:26.0088 0x11bc bowser - ok

16:59:26.0117 0x11bc [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys

16:59:26.0165 0x11bc BrFiltLo - ok

16:59:26.0191 0x11bc [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys

16:59:26.0220 0x11bc BrFiltUp - ok

16:59:26.0252 0x11bc [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll

16:59:26.0289 0x11bc Browser - ok

16:59:26.0317 0x11bc [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys

16:59:26.0375 0x11bc Brserid - ok

16:59:26.0398 0x11bc [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

16:59:26.0430 0x11bc BrSerWdm - ok

16:59:26.0463 0x11bc [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

16:59:26.0511 0x11bc BrUsbMdm - ok

16:59:26.0534 0x11bc [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

16:59:26.0562 0x11bc BrUsbSer - ok

16:59:26.0584 0x11bc [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys

16:59:26.0617 0x11bc BTHMODEM - ok

16:59:26.0647 0x11bc [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll

16:59:26.0751 0x11bc bthserv - ok

16:59:26.0799 0x11bc [ D1787E11C6A0078DDEAF8CF3EE2AB293, 15362A48EFF3DDD6C6D9B333CB7F5FE835B60A256B29467AD749DCFAC6C761D3 ] CAXHWAZL C:\Windows\system32\DRIVERS\CAXHWAZL.sys

16:59:26.0865 0x11bc CAXHWAZL - ok

16:59:26.0980 0x11bc [ 37F1BAEC39B505B3B51893A35C8337EA, C202362CD313B457937A3134463AC8143A19D1024EA6A3192D648DCE46D40AD3 ] ccHP C:\Windows\system32\drivers\NISx64\1109000.00C\ccHPx64.sys

16:59:27.0122 0x11bc ccHP - ok

16:59:27.0151 0x11bc [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

16:59:27.0237 0x11bc cdfs - ok

16:59:27.0286 0x11bc [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

16:59:27.0317 0x11bc cdrom - ok

16:59:27.0355 0x11bc [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll

16:59:27.0418 0x11bc CertPropSvc - ok

16:59:27.0456 0x11bc [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys

16:59:27.0501 0x11bc circlass - ok

16:59:27.0555 0x11bc [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys

16:59:27.0622 0x11bc CLFS - ok

16:59:27.0696 0x11bc [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:59:27.0796 0x11bc clr_optimization_v2.0.50727_32 - ok

16:59:27.0855 0x11bc [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

16:59:27.0922 0x11bc clr_optimization_v2.0.50727_64 - ok

16:59:28.0010 0x11bc [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:59:28.0138 0x11bc clr_optimization_v4.0.30319_32 - ok

16:59:28.0178 0x11bc [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

16:59:28.0254 0x11bc clr_optimization_v4.0.30319_64 - ok

16:59:28.0279 0x11bc [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys

16:59:28.0306 0x11bc CmBatt - ok

16:59:28.0343 0x11bc [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys

16:59:28.0407 0x11bc cmdide - ok

16:59:28.0459 0x11bc [ E45CDE1C8340DFEDF1D6724263F39E5B, 8B8091D0A8FF08170F34DA01A4201DAE7C3D026226BC77B5C2EC67657C670168 ] CNG C:\Windows\system32\Drivers\cng.sys

16:59:28.0548 0x11bc CNG - ok

16:59:28.0580 0x11bc [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys

16:59:28.0647 0x11bc Compbatt - ok

16:59:28.0711 0x11bc [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys

16:59:28.0758 0x11bc CompositeBus - ok

16:59:28.0762 0x11bc COMSysApp - ok

16:59:28.0788 0x11bc [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys

16:59:28.0842 0x11bc crcdisk - ok

16:59:28.0889 0x11bc [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc C:\Windows\system32\cryptsvc.dll

16:59:28.0936 0x11bc CryptSvc - ok

16:59:29.0018 0x11bc [ D06E443457FADC6B1AFAF3AA4B6936F6, 109B4D05E156604AFB3D63B380CC063B900AEB12F57A1D235B9F9399EE0909C7 ] dc3d C:\Windows\system32\DRIVERS\dc3d.sys

16:59:29.0095 0x11bc dc3d - ok

16:59:29.0151 0x11bc [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll

16:59:29.0216 0x11bc DcomLaunch - ok

16:59:29.0255 0x11bc [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll

16:59:29.0315 0x11bc defragsvc - ok

16:59:29.0326 0x11bc dfg - ok

16:59:29.0372 0x11bc [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys

16:59:29.0456 0x11bc DfsC - ok

16:59:29.0488 0x11bc [ 1E0F456A03E204F92D24437CD907A512, 8BB28AF33BDEFFECC4EC5C6BFBFBDA525A32FA6A26382353E01FF94BAD2A200C ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys

16:59:29.0545 0x11bc dg_ssudbus - ok

16:59:29.0624 0x11bc [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll

16:59:29.0695 0x11bc Dhcp - ok

16:59:29.0723 0x11bc [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys

16:59:29.0786 0x11bc discache - ok

16:59:29.0829 0x11bc [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys

16:59:29.0891 0x11bc Disk - ok

16:59:29.0957 0x11bc [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll

16:59:30.0009 0x11bc Dnscache - ok

16:59:30.0064 0x11bc [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll

16:59:30.0170 0x11bc dot3svc - ok

16:59:30.0243 0x11bc [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll

16:59:30.0309 0x11bc DPS - ok

16:59:30.0351 0x11bc [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

16:59:30.0420 0x11bc drmkaud - ok

16:59:30.0483 0x11bc [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

16:59:30.0564 0x11bc DXGKrnl - ok

16:59:30.0607 0x11bc [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll

16:59:30.0661 0x11bc EapHost - ok

16:59:30.0832 0x11bc [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys

16:59:31.0059 0x11bc ebdrv - ok

16:59:31.0158 0x11bc [ 47A68B3DBBB34D4FE61DE221A8536627, BC61CE4BD4F3A12C75BA6EB9D239F24CD3F54495DE9D6C901F4DAF5D92E8366B ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

16:59:31.0276 0x11bc eeCtrl - ok

16:59:31.0314 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] EFS C:\Windows\System32\lsass.exe

16:59:31.0355 0x11bc EFS - ok

16:59:31.0448 0x11bc [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

16:59:31.0568 0x11bc ehRecvr - ok

16:59:31.0599 0x11bc [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe

16:59:31.0691 0x11bc ehSched - ok

16:59:31.0752 0x11bc [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys

16:59:31.0816 0x11bc elxstor - ok

16:59:31.0918 0x11bc [ FB67AA8AC61B9365ADD546139A21BED6, DDE2053071ED1F7E634FF1A74DB0ACC7D0D19B0AD0CF37DE989FA91B93C76452 ] ePowerSvc C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe

16:59:31.0993 0x11bc ePowerSvc - ok

16:59:32.0073 0x11bc [ B9773081AAF65E6D553496BA0CADCBB3, 3A77A12544755BFA1ABAA6DC53E5F03522627F57EF7092E3CC54C6431C75076A ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

16:59:32.0140 0x11bc EraserUtilRebootDrv - ok

16:59:32.0174 0x11bc [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys

16:59:32.0201 0x11bc ErrDev - ok

16:59:32.0243 0x11bc [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll

16:59:32.0308 0x11bc EventSystem - ok

16:59:32.0338 0x11bc [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys

16:59:32.0425 0x11bc exfat - ok

16:59:32.0446 0x11bc [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys

16:59:32.0516 0x11bc fastfat - ok

16:59:32.0575 0x11bc [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe

16:59:32.0625 0x11bc Fax - ok

16:59:32.0660 0x11bc [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys

16:59:32.0718 0x11bc fdc - ok

16:59:32.0760 0x11bc [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll

16:59:32.0831 0x11bc fdPHost - ok

16:59:32.0842 0x11bc [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll

16:59:32.0907 0x11bc FDResPub - ok

16:59:32.0927 0x11bc [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

16:59:32.0957 0x11bc FileInfo - ok

16:59:32.0981 0x11bc [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

16:59:33.0080 0x11bc Filetrace - ok

16:59:33.0104 0x11bc [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys

16:59:33.0132 0x11bc flpydisk - ok

16:59:33.0181 0x11bc [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

16:59:33.0253 0x11bc FltMgr - ok

16:59:33.0344 0x11bc [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll

16:59:33.0425 0x11bc FontCache - ok

16:59:33.0489 0x11bc [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

16:59:33.0550 0x11bc FontCache3.0.0.0 - ok

16:59:33.0622 0x11bc [ 07AF7870ABF051EBBAE8A8A92FF34ABE, D5FD122A8F1984DA33EB8A0B70F11E5C7B48744B80C182A3B7891CFBC30B2BD3 ] FreeAgentGoNext Service C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe

16:59:33.0662 0x11bc FreeAgentGoNext Service - ok

16:59:33.0688 0x11bc [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

16:59:33.0730 0x11bc FsDepends - ok

16:59:33.0771 0x11bc [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

16:59:33.0844 0x11bc Fs_Rec - ok

16:59:33.0873 0x11bc [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

16:59:33.0944 0x11bc fvevol - ok

16:59:33.0975 0x11bc [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys

16:59:34.0003 0x11bc gagp30kx - ok

16:59:34.0081 0x11bc [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll

16:59:34.0191 0x11bc gpsvc - ok

16:59:34.0326 0x11bc [ 816FD5A6F3C2F3D600900096632FC60E, D92401C4B56663F8A12B6390562608A125713408B00266C53844129679E48E9C ] Greg_Service C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe

16:59:34.0405 0x11bc Greg_Service - ok

16:59:34.0438 0x11bc [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

16:59:34.0490 0x11bc hcw85cir - ok

16:59:34.0610 0x11bc [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

16:59:34.0735 0x11bc HdAudAddService - ok

16:59:34.0758 0x11bc [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys

16:59:34.0791 0x11bc HDAudBus - ok

16:59:34.0814 0x11bc [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys

16:59:34.0863 0x11bc HidBatt - ok

16:59:34.0884 0x11bc [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys

16:59:34.0916 0x11bc HidBth - ok

16:59:34.0934 0x11bc [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys

16:59:34.0964 0x11bc HidIr - ok

16:59:34.0997 0x11bc [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll

16:59:35.0049 0x11bc hidserv - ok

16:59:35.0082 0x11bc [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys

16:59:35.0162 0x11bc HidUsb - ok

16:59:35.0216 0x11bc [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll

16:59:35.0280 0x11bc hkmsvc - ok

16:59:35.0336 0x11bc [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

16:59:35.0433 0x11bc HomeGroupListener - ok

16:59:35.0489 0x11bc [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

16:59:35.0532 0x11bc HomeGroupProvider - ok

16:59:35.0578 0x11bc [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

16:59:35.0639 0x11bc HpSAMD - ok

16:59:35.0740 0x11bc [ 447256D1C026654C5CD3CC17E7B20631, F89589AC17BC50483E6687963370937E6CD19D6030F30D70577A7DA266116919 ] HsfXAudioService C:\Windows\SysWOW64\XAudio64.dll

16:59:35.0781 0x11bc HsfXAudioService - ok

16:59:35.0852 0x11bc [ 26C5D00321937E49B6BC91029947D094, 610BBA49EAB5926FBC4B7990A64A8C3E5B7634CB25A39FC4D9104DD60FA3451A ] HSF_DPV C:\Windows\system32\DRIVERS\CAX_DPV.sys

16:59:35.0960 0x11bc HSF_DPV - ok

16:59:35.0987 0x11bc [ 363571BC0C79E394E69300D1F2E3DDAE, 4C9DDB848900081D95C14026B0E7B84419867685506E616E1FDA1B79B1FD224B ] HTCAND64 C:\Windows\system32\Drivers\ANDROIDUSB.sys

16:59:36.0010 0x11bc HTCAND64 - ok

16:59:36.0085 0x11bc [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys

16:59:36.0186 0x11bc HTTP - ok

16:59:36.0219 0x11bc [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

16:59:36.0275 0x11bc hwpolicy - ok

16:59:36.0313 0x11bc [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys

16:59:36.0367 0x11bc i8042prt - ok

16:59:36.0410 0x11bc [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

16:59:36.0491 0x11bc iaStorV - ok

16:59:36.0572 0x11bc [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

16:59:36.0678 0x11bc idsvc - ok

16:59:36.0944 0x11bc [ EB1118C371A096FFD4275EB85CB9EC2E, 9A697FFA7874279D26B71F1294858B8F91CB9782E40AB963AA417AFF4FFD3889 ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20150227.003\IDSvia64.sys

16:59:37.0048 0x11bc IDSVia64 - ok

16:59:37.0054 0x11bc IEEtwCollectorService - ok

16:59:37.0379 0x11bc [ 2D18C9E1F23970DE32D78D3B1CDDA0A7, 4AC6425F6D1921ED7975A0450D536B2675964574E40D86099410423E72D70D88 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys

16:59:37.0876 0x11bc igfx - ok

16:59:37.0933 0x11bc [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys

16:59:37.0991 0x11bc iirsp - ok

16:59:38.0060 0x11bc [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll

16:59:38.0115 0x11bc IKEEXT - ok

16:59:38.0224 0x11bc [ 0C3CF4B3BAE28E121A1689E3538F8712, 1599785D54E8306872A1DDD8546D316C9B193A85C5AEB37CF956B8C4077B8792 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

16:59:38.0388 0x11bc IntcAzAudAddService - ok

16:59:38.0432 0x11bc [ 88A20FA54C73DED4E8DAC764E9130AE9, BBD9C8D12063F0A464FE0C48C6913A772EF5A5DCB8A00EBD37E494DCB752A5FF ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys

16:59:38.0525 0x11bc IntcHdmiAddService - ok

16:59:38.0567 0x11bc [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys

16:59:38.0621 0x11bc intelide - ok

16:59:38.0665 0x11bc [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys

16:59:38.0695 0x11bc intelppm - ok

16:59:38.0717 0x11bc [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll

16:59:38.0809 0x11bc IPBusEnum - ok

16:59:38.0839 0x11bc [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:59:38.0926 0x11bc IpFilterDriver - ok

16:59:38.0994 0x11bc [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll

16:59:39.0042 0x11bc iphlpsvc - ok

16:59:39.0082 0x11bc [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

16:59:39.0151 0x11bc IPMIDRV - ok

16:59:39.0183 0x11bc [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys

16:59:39.0237 0x11bc IPNAT - ok

16:59:39.0259 0x11bc [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys

16:59:39.0317 0x11bc IRENUM - ok

16:59:39.0353 0x11bc [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys

16:59:39.0393 0x11bc isapnp - ok

16:59:39.0449 0x11bc [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

16:59:39.0524 0x11bc iScsiPrt - ok

16:59:39.0570 0x11bc [ 08DD34F74D65E1C8F238565570952630, CD58D4A05AE191A60FC4A1D6D11EF86885A600F42607BFD57895F8611A1F7A23 ] k57nd60a C:\Windows\system32\DRIVERS\k57nd60a.sys

16:59:39.0653 0x11bc k57nd60a - ok

16:59:39.0691 0x11bc [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys

16:59:39.0735 0x11bc kbdclass - ok

16:59:39.0771 0x11bc [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys

16:59:39.0799 0x11bc kbdhid - ok

16:59:39.0849 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] KeyIso C:\Windows\system32\lsass.exe

16:59:39.0878 0x11bc KeyIso - ok

16:59:39.0949 0x11bc [ E7A09EB5BF6E64801E992F47AA41D0EF, 379D43C86A51433BC6AE250F4673F166C2B1FD00207AA01F38B16C481E2986DF ] KeyScrambler C:\Windows\system32\drivers\keyscrambler.sys

16:59:40.0041 0x11bc KeyScrambler - ok

16:59:40.0083 0x11bc [ C60C6B9A2E50B0404F6789C62B428C03, 0DFFAACBA038FB3D994049E7BBC8E0C63CB8B4A68C4AB770AD995B66B017C25B ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

16:59:40.0162 0x11bc KSecDD - ok

16:59:40.0187 0x11bc [ 78D152A9FD5747FF6AA89C79F0346F62, 69138077E84E5324751E3C8B80D05BE58EDF03CEC84F69B734537F10F6998F3B ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

16:59:40.0233 0x11bc KSecPkg - ok

16:59:40.0260 0x11bc [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

16:59:40.0358 0x11bc ksthunk - ok

16:59:40.0404 0x11bc [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll

16:59:40.0479 0x11bc KtmRm - ok

16:59:40.0524 0x11bc [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\system32\srvsvc.dll

16:59:40.0597 0x11bc LanmanServer - ok

16:59:40.0662 0x11bc [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:59:40.0735 0x11bc LanmanWorkstation - ok

16:59:40.0931 0x11bc [ 87AAC3CBD2C5D5AC6CA87AD08A228241, 0F7C70976753672D6771DC67E40CF5B25C2F215EF42F61528BD8E8B84C91F42E ] LiveUpdateSvc C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

16:59:41.0231 0x11bc LiveUpdateSvc - ok

16:59:41.0264 0x11bc [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

16:59:41.0357 0x11bc lltdio - ok

16:59:41.0403 0x11bc [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll

16:59:41.0507 0x11bc lltdsvc - ok

16:59:41.0524 0x11bc [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll

16:59:41.0577 0x11bc lmhosts - ok

16:59:41.0643 0x11bc [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys

16:59:41.0694 0x11bc LSI_FC - ok

16:59:41.0713 0x11bc [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys

16:59:41.0745 0x11bc LSI_SAS - ok

16:59:41.0777 0x11bc [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys

16:59:41.0840 0x11bc LSI_SAS2 - ok

16:59:41.0861 0x11bc [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys

16:59:41.0891 0x11bc LSI_SCSI - ok

16:59:41.0908 0x11bc [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys

16:59:41.0980 0x11bc luafv - ok

16:59:42.0062 0x11bc [ F6963E48385A5637FC4E51DC0F8234A0, AC169680F2F299FE92F86FBB5E721AC096E74F700D686480346C8FF7F9ECCE5B ] lxebCATSCustConnectService C:\Windows\system32\spool\DRIVERS\x64\3\\lxebserv.exe

16:59:42.0122 0x11bc lxebCATSCustConnectService - ok

16:59:42.0126 0x11bc lxeb_device - ok

16:59:42.0158 0x11bc [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys

16:59:42.0223 0x11bc MBAMProtector - ok

16:59:42.0371 0x11bc [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

16:59:42.0493 0x11bc MBAMScheduler - ok

16:59:42.0647 0x11bc [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

16:59:42.0733 0x11bc MBAMService - ok

16:59:42.0807 0x11bc [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy C:\Windows\system32\drivers\28910BDB.sys

16:59:42.0889 0x11bc MBAMSwissArmy - ok

16:59:42.0925 0x11bc [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

16:59:42.0998 0x11bc MBAMWebAccessControl - ok

16:59:43.0034 0x11bc [ 79D51E7F5926E8CE1B3EBECEBAE28CFF, 2722E217AF11F928E58F694E5C1CC5776283A56C54E7F84401FECFBD73E91EBA ] mcdbus C:\Windows\system32\DRIVERS\mcdbus.sys

16:59:43.0101 0x11bc mcdbus - ok

16:59:43.0132 0x11bc [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

16:59:43.0174 0x11bc Mcx2Svc - ok

16:59:43.0287 0x11bc [ 7CF1B716372B89568AE4C0FE769F5869, 0D70A7A594BCFBB26D7249C0F4B0AF9EF874F2318B3FDCE44648CC61279594ED ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

16:59:43.0404 0x11bc MDM - detected UnsignedFile.Multi.Generic ( 1 )

16:59:46.0124 0x11bc Detect skipped due to KSN trusted

16:59:46.0124 0x11bc MDM - ok

16:59:46.0178 0x11bc [ E4F44EC214B3E381E1FC844A02926666, 6EE8C87EFCEFFBEA08B9B9DA036B37564542EE4D31942115CDBF895295DD5FE2 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys

16:59:46.0235 0x11bc mdmxsdk - ok

16:59:46.0275 0x11bc [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys

16:59:46.0302 0x11bc megasas - ok

16:59:46.0322 0x11bc [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys

16:59:46.0372 0x11bc MegaSR - ok

16:59:46.0453 0x11bc Microsoft SharePoint Workspace Audit Service - ok

16:59:46.0487 0x11bc [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll

16:59:46.0555 0x11bc MMCSS - ok

16:59:46.0580 0x11bc [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys

16:59:46.0643 0x11bc Modem - ok

16:59:46.0662 0x11bc [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys

16:59:46.0693 0x11bc monitor - ok

16:59:46.0712 0x11bc [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys

16:59:46.0740 0x11bc mouclass - ok

16:59:46.0759 0x11bc [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys

16:59:46.0815 0x11bc mouhid - ok

16:59:46.0863 0x11bc [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

16:59:46.0924 0x11bc mountmgr - ok

16:59:46.0978 0x11bc [ 28048289E32294004A86935CC40A3252, D397C3BAD6BCDA33FA0982E10677598E8BDF69A0933D19A36873CB45BA4FB819 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

16:59:47.0058 0x11bc MozillaMaintenance - ok

16:59:47.0107 0x11bc [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys

16:59:47.0170 0x11bc mpio - ok

16:59:47.0204 0x11bc [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

16:59:47.0257 0x11bc mpsdrv - ok

16:59:47.0315 0x11bc [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll

16:59:47.0412 0x11bc MpsSvc - ok

16:59:47.0455 0x11bc [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

16:59:47.0572 0x11bc MRxDAV - ok

16:59:47.0649 0x11bc [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

16:59:47.0764 0x11bc mrxsmb - ok

16:59:47.0810 0x11bc [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:59:47.0893 0x11bc mrxsmb10 - ok

16:59:47.0936 0x11bc [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:59:48.0003 0x11bc mrxsmb20 - ok

16:59:48.0036 0x11bc [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys

16:59:48.0098 0x11bc msahci - ok

16:59:48.0132 0x11bc [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys

16:59:48.0196 0x11bc msdsm - ok

16:59:48.0217 0x11bc [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe

16:59:48.0249 0x11bc MSDTC - ok

16:59:48.0285 0x11bc [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys

16:59:48.0395 0x11bc Msfs - ok

16:59:48.0414 0x11bc [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

16:59:48.0463 0x11bc mshidkmdf - ok

16:59:48.0497 0x11bc [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

16:59:48.0548 0x11bc msisadrv - ok

16:59:48.0591 0x11bc [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

16:59:48.0693 0x11bc MSiSCSI - ok

16:59:48.0698 0x11bc msiserver - ok

16:59:48.0730 0x11bc [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

16:59:48.0819 0x11bc MSKSSRV - ok

16:59:48.0841 0x11bc [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

16:59:48.0890 0x11bc MSPCLOCK - ok

16:59:48.0910 0x11bc [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

16:59:49.0002 0x11bc MSPQM - ok

16:59:49.0058 0x11bc [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

16:59:49.0136 0x11bc MsRPC - ok

16:59:49.0177 0x11bc [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys

16:59:49.0204 0x11bc mssmbios - ok

16:59:49.0237 0x11bc [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

16:59:49.0296 0x11bc MSTEE - ok

16:59:49.0312 0x11bc [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys

16:59:49.0339 0x11bc MTConfig - ok

16:59:49.0353 0x11bc [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys

16:59:49.0387 0x11bc Mup - ok

16:59:49.0442 0x11bc [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll

16:59:49.0509 0x11bc napagent - ok

16:59:49.0549 0x11bc [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

16:59:49.0617 0x11bc NativeWifiP - ok

16:59:49.0736 0x11bc [ 54F4B358F41C664CBDE4507D67EED1CD, CDCA0A778AF596933CD7CBF1119FCA551ECC03CBBD4F1E8213C3FD2FECA902F2 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20150301.024\ENG64.SYS

16:59:49.0799 0x11bc NAVENG - ok

16:59:49.0921 0x11bc [ A74D67EEEB3938FD2FA3B65B24C32C44, 4D780B70B57E23A3A155794C4DEEBD856E32D35B789BDF4673AAC8FC3AC4367B ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20150301.024\EX64.SYS

16:59:50.0081 0x11bc NAVEX15 - ok

16:59:50.0158 0x11bc [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys

16:59:50.0286 0x11bc NDIS - ok

16:59:50.0315 0x11bc [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

16:59:50.0377 0x11bc NdisCap - ok

16:59:50.0396 0x11bc [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

16:59:50.0452 0x11bc NdisTapi - ok

16:59:50.0499 0x11bc [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

16:59:50.0583 0x11bc Ndisuio - ok

16:59:50.0620 0x11bc [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

16:59:50.0675 0x11bc NdisWan - ok

16:59:50.0731 0x11bc [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

16:59:50.0843 0x11bc NDProxy - ok

16:59:50.0878 0x11bc [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

16:59:50.0940 0x11bc NetBIOS - ok

16:59:50.0988 0x11bc [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

16:59:51.0066 0x11bc NetBT - ok

16:59:51.0105 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] Netlogon C:\Windows\system32\lsass.exe

16:59:51.0133 0x11bc Netlogon - ok

16:59:51.0172 0x11bc [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll

16:59:51.0238 0x11bc Netman - ok

16:59:51.0317 0x11bc [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:59:51.0397 0x11bc NetMsmqActivator - ok

16:59:51.0405 0x11bc [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:59:51.0436 0x11bc NetPipeActivator - ok

16:59:51.0497 0x11bc [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll

16:59:51.0590 0x11bc netprofm - ok

16:59:51.0615 0x11bc [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:59:51.0645 0x11bc NetTcpActivator - ok

16:59:51.0653 0x11bc [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:59:51.0684 0x11bc NetTcpPortSharing - ok

16:59:52.0025 0x11bc [ 39EDE676D17F37AF4573C2B33EC28ACA, 6C897C8B72D7AC1385302E58509688790CC5F428E967485F92C3CD646907EF59 ] NETw5s64 C:\Windows\system32\DRIVERS\NETw5s64.sys

16:59:52.0469 0x11bc NETw5s64 - ok

16:59:52.0521 0x11bc [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys

16:59:52.0580 0x11bc nfrd960 - ok

16:59:52.0683 0x11bc [ B4187346F54E362DAFFE647B25A58D50, 5890D3B7ED2E15CAC4E1F7EC1B47D48579C8DAE3EEFAC9B29476B0FC48D726DB ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe

16:59:52.0745 0x11bc NIS - ok

16:59:52.0826 0x11bc [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc C:\Windows\System32\nlasvc.dll

16:59:52.0888 0x11bc NlaSvc - ok

16:59:52.0921 0x11bc [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys

16:59:52.0998 0x11bc Npfs - ok

16:59:53.0028 0x11bc [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll

16:59:53.0078 0x11bc nsi - ok

16:59:53.0097 0x11bc [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

16:59:53.0165 0x11bc nsiproxy - ok

16:59:53.0264 0x11bc [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

16:59:53.0426 0x11bc Ntfs - ok

16:59:53.0472 0x11bc [ 14E66F603FB187713AEB02AD3B0390CF, E4025ECBEC50B85E3A860763053243C47E3FCE76F2348429C03827240A8DF3B6 ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe

16:59:53.0542 0x11bc NTI IScheduleSvc - ok

16:59:53.0578 0x11bc [ 64DDD0DEE976302F4BD93E5EFCC2F013, 19F54B4549999EF96FAE1B2B97973F281304843ADE0CF5823574453AB41E3E9C ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys

16:59:53.0645 0x11bc NTIDrvr - ok

16:59:53.0705 0x11bc [ 96ACBF3DDC38A52FEE115F577F36568F, DB8CB01971208C8D7A306A5FEDA39A3802195123E6B801DFB905B0E1934D3C96 ] NuidFltr C:\Windows\system32\DRIVERS\NuidFltr.sys

16:59:53.0759 0x11bc NuidFltr - ok

16:59:53.0794 0x11bc [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys

16:59:53.0901 0x11bc Null - ok

16:59:53.0932 0x11bc [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys

16:59:54.0007 0x11bc nvraid - ok

16:59:54.0050 0x11bc [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys

16:59:54.0116 0x11bc nvstor - ok

16:59:54.0162 0x11bc [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

16:59:54.0234 0x11bc nv_agp - ok

16:59:54.0255 0x11bc [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

16:59:54.0284 0x11bc ohci1394 - ok

16:59:54.0311 0x11bc [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:59:54.0415 0x11bc ose - ok

16:59:54.0689 0x11bc [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

16:59:54.0931 0x11bc osppsvc - ok

16:59:55.0065 0x11bc [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

16:59:55.0319 0x11bc p2pimsvc - ok

16:59:55.0346 0x11bc [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll

16:59:55.0405 0x11bc p2psvc - ok

16:59:55.0443 0x11bc [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys

16:59:55.0503 0x11bc Parport - ok

16:59:55.0550 0x11bc [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys

16:59:55.0611 0x11bc partmgr - ok

16:59:55.0642 0x11bc [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll

16:59:55.0681 0x11bc PcaSvc - ok

16:59:55.0712 0x11bc [ BC0018C2D29F655188A0ED3FA94FDB24, BCF7F2CA5E30F569AEB69049BA3C196982C72EA7264CFBA59D7123041BA96E5A ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

16:59:55.0796 0x11bc pccsmcfd - ok

16:59:55.0820 0x11bc [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys

16:59:55.0870 0x11bc pci - ok

16:59:55.0909 0x11bc [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys

16:59:55.0965 0x11bc pciide - ok

16:59:56.0015 0x11bc [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys

16:59:56.0076 0x11bc pcmcia - ok

16:59:56.0098 0x11bc [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys

16:59:56.0127 0x11bc pcw - ok

16:59:56.0167 0x11bc [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys

16:59:56.0255 0x11bc PEAUTH - ok

16:59:56.0343 0x11bc [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe

16:59:56.0423 0x11bc PerfHost - ok

16:59:56.0526 0x11bc [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll

16:59:56.0646 0x11bc pla - ok

16:59:56.0715 0x11bc [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

16:59:56.0763 0x11bc PlugPlay - ok

16:59:56.0780 0x11bc [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

16:59:56.0832 0x11bc PNRPAutoReg - ok

16:59:56.0871 0x11bc [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

16:59:56.0911 0x11bc PNRPsvc - ok

16:59:56.0969 0x11bc [ E4799B87675C59AA1F620DE5C6F113BB, 094EE16D4CEC68DB316002994482344A6BFCFDE399131F7FA11BB46C2DCBF218 ] Point64 C:\Windows\system32\DRIVERS\point64.sys

16:59:57.0034 0x11bc Point64 - ok

16:59:57.0086 0x11bc [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

16:59:57.0152 0x11bc PolicyAgent - ok

16:59:57.0206 0x11bc [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll

16:59:57.0289 0x11bc Power - ok

16:59:57.0335 0x11bc [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

16:59:57.0416 0x11bc PptpMiniport - ok

16:59:57.0454 0x11bc [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys

16:59:57.0483 0x11bc Processor - ok

16:59:57.0527 0x11bc [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc C:\Windows\system32\profsvc.dll

16:59:57.0572 0x11bc ProfSvc - ok

16:59:57.0584 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] ProtectedStorage C:\Windows\system32\lsass.exe

16:59:57.0611 0x11bc ProtectedStorage - ok

16:59:57.0646 0x11bc [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys

16:59:57.0734 0x11bc Psched - ok

16:59:57.0740 0x11bc PTUMWBus - ok

16:59:57.0746 0x11bc PTUMWCDF - ok

16:59:57.0751 0x11bc PTUMWFLT - ok

16:59:57.0756 0x11bc PTUMWMdm - ok

16:59:57.0762 0x11bc PTUMWNET - ok

16:59:57.0767 0x11bc PTUMWVsp - ok

16:59:57.0871 0x11bc [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys

16:59:57.0978 0x11bc ql2300 - ok

16:59:58.0008 0x11bc [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys

16:59:58.0078 0x11bc ql40xx - ok

16:59:58.0113 0x11bc [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll

16:59:58.0169 0x11bc QWAVE - ok

16:59:58.0197 0x11bc [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

16:59:58.0250 0x11bc QWAVEdrv - ok

16:59:58.0267 0x11bc [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

16:59:58.0316 0x11bc RasAcd - ok

16:59:58.0353 0x11bc [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

16:59:58.0438 0x11bc RasAgileVpn - ok

16:59:58.0471 0x11bc [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll

16:59:58.0535 0x11bc RasAuto - ok

16:59:58.0583 0x11bc [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

16:59:58.0694 0x11bc Rasl2tp - ok

16:59:58.0747 0x11bc [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll

16:59:58.0829 0x11bc RasMan - ok

16:59:58.0868 0x11bc [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

16:59:58.0950 0x11bc RasPppoe - ok

16:59:58.0980 0x11bc [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

16:59:59.0034 0x11bc RasSstp - ok

16:59:59.0082 0x11bc [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

16:59:59.0181 0x11bc rdbss - ok

16:59:59.0229 0x11bc [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys

16:59:59.0278 0x11bc rdpbus - ok

16:59:59.0305 0x11bc [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

16:59:59.0355 0x11bc RDPCDD - ok

16:59:59.0376 0x11bc [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

16:59:59.0458 0x11bc RDPENCDD - ok

16:59:59.0494 0x11bc [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

16:59:59.0573 0x11bc RDPREFMP - ok

16:59:59.0630 0x11bc [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

16:59:59.0717 0x11bc RdpVideoMiniport - ok

16:59:59.0760 0x11bc [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

16:59:59.0864 0x11bc RDPWD - ok

16:59:59.0911 0x11bc [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

16:59:59.0980 0x11bc rdyboost - ok

17:00:00.0030 0x11bc [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll

17:00:00.0118 0x11bc RemoteAccess - ok

17:00:00.0158 0x11bc [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll

17:00:00.0251 0x11bc RemoteRegistry - ok

17:00:00.0277 0x11bc [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

17:00:00.0331 0x11bc RpcEptMapper - ok

17:00:00.0420 0x11bc [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe

17:00:00.0541 0x11bc RpcLocator - ok

17:00:00.0604 0x11bc [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll

17:00:00.0679 0x11bc RpcSs - ok

17:00:00.0725 0x11bc [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

17:00:00.0808 0x11bc rspndr - ok

17:00:00.0850 0x11bc [ DB30AA4DAA0D492FA5D7717D8181FFA1, 1126AD4998D410918CFB7DBD9C74DA7F4066A4C0F90F0E7D689A6E65B2420817 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys

17:00:00.0933 0x11bc RSUSBSTOR - ok

17:00:00.0984 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] SamSs C:\Windows\system32\lsass.exe

17:00:01.0012 0x11bc SamSs - ok

17:00:01.0059 0x11bc [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

17:00:01.0110 0x11bc sbp2port - ok

17:00:01.0161 0x11bc [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll

17:00:01.0230 0x11bc SCardSvr - ok

17:00:01.0269 0x11bc [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

17:00:01.0351 0x11bc scfilter - ok

17:00:01.0467 0x11bc [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll

17:00:01.0584 0x11bc Schedule - ok

17:00:01.0625 0x11bc [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll

17:00:01.0674 0x11bc SCPolicySvc - ok

17:00:01.0718 0x11bc [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll

17:00:01.0779 0x11bc SDRSVC - ok

17:00:01.0823 0x11bc [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys

17:00:01.0902 0x11bc secdrv - ok

17:00:01.0934 0x11bc [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll

17:00:02.0016 0x11bc seclogon - ok

17:00:02.0046 0x11bc [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\System32\sens.dll

17:00:02.0102 0x11bc SENS - ok

17:00:02.0132 0x11bc [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll

17:00:02.0212 0x11bc SensrSvc - ok

17:00:02.0236 0x11bc [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys

17:00:02.0263 0x11bc Serenum - ok

17:00:02.0306 0x11bc [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys

17:00:02.0372 0x11bc Serial - ok

17:00:02.0414 0x11bc [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys

17:00:02.0441 0x11bc sermouse - ok

17:00:02.0537 0x11bc [ 3EC8DE67B1C78C31E54C0F030E6BD7D5, 3D9C8CE5EEDFC4EB4C1BF7182C86185C40E8ED40946702BFC16EFBDF93B9778D ] ServiceLayer C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

17:00:02.0610 0x11bc ServiceLayer - detected UnsignedFile.Multi.Generic ( 1 )

17:00:05.0320 0x11bc Detect skipped due to KSN trusted

17:00:05.0320 0x11bc ServiceLayer - ok

17:00:05.0434 0x11bc [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll

17:00:05.0495 0x11bc SessionEnv - ok

17:00:05.0577 0x11bc [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

17:00:05.0658 0x11bc sffdisk - ok

17:00:05.0678 0x11bc [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

17:00:05.0703 0x11bc sffp_mmc - ok

17:00:05.0724 0x11bc [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

17:00:05.0768 0x11bc sffp_sd - ok

17:00:05.0800 0x11bc [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys

17:00:05.0829 0x11bc sfloppy - ok

17:00:05.0889 0x11bc [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll

17:00:05.0988 0x11bc SharedAccess - ok

17:00:06.0067 0x11bc [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

17:00:06.0139 0x11bc ShellHWDetection - ok

17:00:06.0184 0x11bc [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys

17:00:06.0252 0x11bc SiSRaid2 - ok

17:00:06.0281 0x11bc [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys

17:00:06.0405 0x11bc SiSRaid4 - ok

17:00:06.0476 0x11bc [ A9C057A9463C25490CF99EA8DF8A4B35, 8F4D1C40D0F17EDBF84ED455B8946F782C7552383F0A07E410A9B6CFF7F51D63 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe

17:00:06.0566 0x11bc SkypeUpdate - ok

17:00:06.0621 0x11bc [ E77CB3736A702D46A6FB15FB4A9894E3, A341AD51825D4DB8A68ADDABE0FD17693DE387B0DA11800D427B8EA31577626C ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys

17:00:06.0697 0x11bc SmartDefragDriver - ok

17:00:06.0745 0x11bc [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys

17:00:06.0833 0x11bc Smb - ok

17:00:06.0866 0x11bc [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe

17:00:06.0906 0x11bc SNMPTRAP - ok

17:00:06.0934 0x11bc [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys

17:00:07.0000 0x11bc spldr - ok

17:00:07.0059 0x11bc [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe

17:00:07.0110 0x11bc Spooler - ok

17:00:07.0295 0x11bc [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe

17:00:07.0651 0x11bc sppsvc - ok

17:00:07.0723 0x11bc [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll

17:00:07.0830 0x11bc sppuinotify - ok

17:00:07.0936 0x11bc [ 96BABC4906ECDB1C69D1176F8647AD8E, DFBA5D62A9454E713BF9653B8D7F986F4318A2BB7985F3D93851D15453FE10A1 ] SRTSP C:\Windows\System32\Drivers\NISx64\1109000.00C\SRTSP64.SYS

17:00:08.0002 0x11bc SRTSP - ok

17:00:08.0032 0x11bc [ C7F491A290E0E4222F5CDCD50EEB8167, C168EA224269A30C7A1AE14C2CDE6FEFBCB2DCB32927CB386DF7C35F51BB2BAD ] SRTSPX C:\Windows\system32\drivers\NISx64\1109000.00C\SRTSPX64.SYS

17:00:08.0083 0x11bc SRTSPX - ok

17:00:08.0145 0x11bc [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys

17:00:08.0249 0x11bc srv - ok

17:00:08.0300 0x11bc [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

17:00:08.0363 0x11bc srv2 - ok

17:00:08.0432 0x11bc [ 0C4540311E11664B245A263E1154CEF8, 63376322BFFAFF2F166AF3FDD3F1A346C21FAE21F406F659F8630779D1D6525D ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS

17:00:08.0506 0x11bc SrvHsfHDA - ok

17:00:08.0615 0x11bc [ 02071D207A9858FBE3A48CBFD59C4A04, FEA4DEBAEC3465E0C7C1E8B721805922F6BBCB96A60A193B11688F4252F4B89E ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS

17:00:08.0709 0x11bc SrvHsfV92 - ok

17:00:08.0786 0x11bc [ 18E40C245DBFAF36FD0134A7EF2DF396, 0138A68958112101A5D3BD94114F320CE80B0C9A93E009AC78DE7415FCCC7DE7 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

17:00:08.0843 0x11bc SrvHsfWinac - ok

17:00:08.0884 0x11bc [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

17:00:08.0931 0x11bc srvnet - ok

17:00:09.0002 0x11bc [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

17:00:09.0069 0x11bc SSDPSRV - ok

17:00:09.0098 0x11bc [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll

17:00:09.0213 0x11bc SstpSvc - ok

17:00:09.0251 0x11bc [ F38232291F05CE25BA1C47FB51EB64CB, 7F72E87D02F3072E0D61D528BEBB8F4BFB6AD67FC94A93745493C9A0907FF435 ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys

17:00:09.0298 0x11bc ssudmdm - ok

17:00:09.0305 0x11bc StarOpen - ok

17:00:09.0333 0x11bc [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys

17:00:09.0390 0x11bc stexstor - ok

17:00:09.0439 0x11bc [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll

17:00:09.0489 0x11bc stisvc - ok

17:00:09.0534 0x11bc [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys

17:00:09.0594 0x11bc swenum - ok

17:00:09.0645 0x11bc [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll

17:00:09.0712 0x11bc swprv - ok

17:00:09.0738 0x11bc [ 659B227A72B76115975A6A9491B2FE1F, 29DA3CD37BDBF2690B3C84233FC594A060EFB3B0D3C43B704CE9D8BE29943AD8 ] SymDS C:\Windows\system32\drivers\NISx64\1109000.00C\SYMDS64.SYS

17:00:09.0816 0x11bc SymDS - ok

17:00:09.0854 0x11bc [ 9F5783A4A03D0091CDBDAA858B566926, A30DED5DCD3B18214B86A08B88D0E98005E66A1C73AC000E24545CE88C9CC99B ] SymEFA C:\Windows\system32\drivers\NISx64\1109000.00C\SYMEFA64.SYS

17:00:09.0902 0x11bc SymEFA - ok

17:00:09.0944 0x11bc [ 3F9D5FE52585E2653E59FDBFDF09A94C, 9BF7EAAEC513C61E2EF717A766932A678A135B0BA547E69771E5FCFBF080D004 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

17:00:10.0016 0x11bc SymEvent - ok

17:00:10.0024 0x11bc SYMFW - ok

17:00:10.0066 0x11bc [ F57588546E738DB1583981D8F44E9BC2, 843F111D820633505D6F6ED553B1F6AB1CAD82606CD3CDB14804AA7C8983CAF6 ] SymIRON C:\Windows\system32\drivers\NISx64\1109000.00C\Ironx64.SYS

17:00:10.0124 0x11bc SymIRON - ok

17:00:10.0130 0x11bc SYMNDISV - ok

17:00:10.0163 0x11bc [ 3ADFB72F0797AE3832509FE030755E21, 03BBAAB27ADCE2EE6A7F22734BEFC34D296DE6E5ECBEEEDD2B332E247543D2B2 ] SYMTDIv C:\Windows\System32\Drivers\NISx64\1109000.00C\SYMTDIV.SYS

17:00:10.0243 0x11bc SYMTDIv - ok

17:00:10.0296 0x11bc [ 5AEEC2BB8065B563ADBC88CA22588953, 59B355478F9A3B08A56FA6B2EB4DD316CD73B9D523C0572CCE7E78FFB777EF9D ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys

17:00:10.0367 0x11bc SynTP - ok

17:00:10.0514 0x11bc [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll

17:00:10.0610 0x11bc SysMain - ok

17:00:10.0673 0x11bc [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

17:00:10.0749 0x11bc TabletInputService - ok

17:00:10.0793 0x11bc [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll

17:00:10.0871 0x11bc TapiSrv - ok

17:00:10.0905 0x11bc [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll

17:00:11.0009 0x11bc TBS - ok

17:00:11.0125 0x11bc [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys

17:00:11.0268 0x11bc Tcpip - ok

17:00:11.0326 0x11bc [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

17:00:11.0399 0x11bc TCPIP6 - ok

17:00:11.0439 0x11bc [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

17:00:11.0504 0x11bc tcpipreg - ok

17:00:11.0548 0x11bc [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

17:00:11.0608 0x11bc TDPIPE - ok

17:00:11.0653 0x11bc [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

17:00:11.0717 0x11bc TDTCP - ok

17:00:11.0765 0x11bc [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys

17:00:11.0849 0x11bc tdx - ok

17:00:11.0887 0x11bc [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys

17:00:11.0949 0x11bc TermDD - ok

17:00:12.0029 0x11bc [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll

17:00:12.0087 0x11bc TermService - ok

17:00:12.0125 0x11bc [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll

17:00:12.0158 0x11bc Themes - ok

17:00:12.0189 0x11bc [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll

17:00:12.0240 0x11bc THREADORDER - ok

17:00:12.0263 0x11bc [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll

17:00:12.0318 0x11bc TrkWks - ok

17:00:12.0387 0x11bc [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

17:00:12.0481 0x11bc TrustedInstaller - ok

17:00:12.0523 0x11bc [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

17:00:12.0577 0x11bc tssecsrv - ok

17:00:12.0625 0x11bc [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

17:00:12.0693 0x11bc TsUsbFlt - ok

17:00:12.0737 0x11bc [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

17:00:12.0830 0x11bc tunnel - ok

17:00:12.0879 0x11bc [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys

17:00:12.0957 0x11bc uagp35 - ok

17:00:12.0980 0x11bc [ 2E22C1FD397A5A9FFEF55E9D1FC96C00, 4646712B3F3AF6188DBCE1A95D92261E8B15E9583FE5DD538EC884F48B51759D ] UBHelper C:\Windows\system32\drivers\UBHelper.sys

17:00:13.0012 0x11bc UBHelper - ok

17:00:13.0055 0x11bc [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

17:00:13.0135 0x11bc udfs - ok

17:00:13.0171 0x11bc [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe

17:00:13.0213 0x11bc UI0Detect - ok

17:00:13.0242 0x11bc [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

17:00:13.0304 0x11bc uliagpkx - ok

17:00:13.0346 0x11bc [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\drivers\umbus.sys

17:00:13.0389 0x11bc umbus - ok

17:00:13.0429 0x11bc [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys

17:00:13.0480 0x11bc UmPass - ok

17:00:13.0577 0x11bc [ 70DDE3A86DBEB1D6C3C30AD687B1877A, 2DAE797240DB8F521F1C9D1171524790052E186B060D58A1B102FBFFC80CE48E ] Updater Service C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe

17:00:13.0751 0x11bc Updater Service - ok

17:00:13.0858 0x11bc [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll

17:00:13.0952 0x11bc upnphost - ok

17:00:13.0987 0x11bc [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys

17:00:14.0052 0x11bc usbaudio - ok

17:00:14.0105 0x11bc [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys

17:00:14.0190 0x11bc usbccgp - ok

17:00:14.0241 0x11bc [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys

17:00:14.0326 0x11bc usbcir - ok

17:00:14.0374 0x11bc [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys

17:00:14.0459 0x11bc usbehci - ok

17:00:14.0511 0x11bc [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys

17:00:14.0588 0x11bc usbhub - ok

17:00:14.0622 0x11bc [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys

17:00:14.0674 0x11bc usbohci - ok

17:00:14.0718 0x11bc [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

17:00:14.0769 0x11bc usbprint - ok

17:00:14.0799 0x11bc [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys

17:00:14.0880 0x11bc usbscan - ok

17:00:14.0929 0x11bc [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

17:00:15.0000 0x11bc USBSTOR - ok

17:00:15.0040 0x11bc [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys

17:00:15.0100 0x11bc usbuhci - ok

17:00:15.0147 0x11bc [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys

17:00:15.0200 0x11bc usbvideo - ok

17:00:15.0251 0x11bc [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys

17:00:15.0371 0x11bc usb_rndisx - ok

17:00:15.0406 0x11bc [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll

17:00:15.0459 0x11bc UxSms - ok

17:00:15.0475 0x11bc [ E0105F3B5B1C4B0F5B3D788A13504EC6, 16C094BC098E4606239C8A54F2E4B92BABB68215CCB43C161661B1A664A0C7A0 ] VaultSvc C:\Windows\system32\lsass.exe

17:00:15.0502 0x11bc VaultSvc - ok

17:00:15.0514 0x11bc [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

17:00:15.0556 0x11bc vdrvroot - ok

17:00:15.0616 0x11bc [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe

17:00:15.0685 0x11bc vds - ok

17:00:15.0719 0x11bc [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

17:00:15.0783 0x11bc vga - ok

17:00:15.0818 0x11bc [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys

17:00:15.0869 0x11bc VgaSave - ok

17:00:15.0923 0x11bc [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

17:00:15.0991 0x11bc vhdmp - ok

17:00:16.0035 0x11bc [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys

17:00:16.0060 0x11bc viaide - ok

17:00:16.0081 0x11bc [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys

17:00:16.0124 0x11bc volmgr - ok

17:00:16.0179 0x11bc [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

17:00:16.0229 0x11bc volmgrx - ok

17:00:16.0282 0x11bc [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys

17:00:16.0340 0x11bc volsnap - ok

17:00:16.0380 0x11bc [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys

17:00:16.0421 0x11bc vsmraid - ok

17:00:16.0513 0x11bc [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe

17:00:16.0611 0x11bc VSS - ok

17:00:16.0627 0x11bc [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

17:00:16.0683 0x11bc vwifibus - ok

17:00:16.0715 0x11bc [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

17:00:16.0748 0x11bc vwififlt - ok

17:00:16.0781 0x11bc [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys

17:00:16.0838 0x11bc vwifimp - ok

17:00:16.0900 0x11bc [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll

17:00:16.0982 0x11bc W32Time - ok

17:00:17.0008 0x11bc [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys

17:00:17.0045 0x11bc WacomPen - ok

17:00:17.0087 0x11bc [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

17:00:17.0171 0x11bc WANARP - ok

17:00:17.0180 0x11bc [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

17:00:17.0231 0x11bc Wanarpv6 - ok

17:00:17.0321 0x11bc [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

17:00:17.0444 0x11bc WatAdminSvc - ok

17:00:17.0561 0x11bc [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe

17:00:17.0697 0x11bc wbengine - ok

17:00:17.0739 0x11bc [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

17:00:17.0777 0x11bc WbioSrvc - ok

17:00:17.0835 0x11bc [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll

17:00:17.0952 0x11bc wcncsvc - ok

17:00:17.0992 0x11bc [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

17:00:18.0090 0x11bc WcsPlugInService - ok

17:00:18.0117 0x11bc [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys

17:00:18.0155 0x11bc Wd - ok

17:00:18.0224 0x11bc [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

17:00:18.0290 0x11bc Wdf01000 - ok

17:00:18.0333 0x11bc [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll

17:00:18.0403 0x11bc WdiServiceHost - ok

17:00:18.0416 0x11bc [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost C:\Windows\system32\wdi.dll

17:00:18.0447 0x11bc WdiSystemHost - ok

17:00:18.0494 0x11bc [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll

17:00:18.0580 0x11bc WebClient - ok

17:00:18.0622 0x11bc [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll

17:00:18.0728 0x11bc Wecsvc - ok

17:00:18.0751 0x11bc [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll

17:00:18.0805 0x11bc wercplsupport - ok

17:00:18.0831 0x11bc [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll

17:00:18.0914 0x11bc WerSvc - ok

17:00:18.0942 0x11bc [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

17:00:18.0994 0x11bc WfpLwf - ok

17:00:19.0021 0x11bc [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys

17:00:19.0048 0x11bc WIMMount - ok

17:00:19.0097 0x11bc [ A6EA7A3FC4B00F48535B506DB1E86EFD, B2A28C0438BA679D760FB8B68289D625CF6204DFF8000A285B5CA68417314F65 ] winachsf C:\Windows\system32\DRIVERS\CAX_CNXT.sys

17:00:19.0166 0x11bc winachsf - ok

17:00:19.0208 0x11bc WinDefend - ok

17:00:19.0225 0x11bc WinHttpAutoProxySvc - ok

17:00:19.0295 0x11bc [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

17:00:19.0363 0x11bc Winmgmt - ok

17:00:19.0482 0x11bc [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll

17:00:19.0673 0x11bc WinRM - ok

17:00:19.0728 0x11bc [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUSB C:\Windows\system32\DRIVERS\WinUSB.sys

17:00:19.0803 0x11bc WinUSB - ok

17:00:19.0892 0x11bc [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll

17:00:19.0959 0x11bc Wlansvc - ok

17:00:20.0134 0x11bc [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

17:00:20.0229 0x11bc wlidsvc - ok

17:00:20.0284 0x11bc [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys

17:00:20.0332 0x11bc WmiAcpi - ok

17:00:20.0388 0x11bc [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

17:00:20.0434 0x11bc wmiApSrv - ok

17:00:20.0472 0x11bc WMPNetworkSvc - ok

17:00:20.0497 0x11bc [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll

17:00:20.0581 0x11bc WPCSvc - ok

17:00:20.0630 0x11bc [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

17:00:20.0720 0x11bc WPDBusEnum - ok

17:00:20.0751 0x11bc [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

17:00:20.0837 0x11bc ws2ifsl - ok

17:00:20.0875 0x11bc [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\System32\wscsvc.dll

17:00:20.0923 0x11bc wscsvc - ok

17:00:20.0930 0x11bc WSearch - ok

17:00:21.0082 0x11bc [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll

17:00:21.0184 0x11bc wuauserv - ok

17:00:21.0234 0x11bc [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

17:00:21.0326 0x11bc WudfPf - ok

17:00:21.0357 0x11bc [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

17:00:21.0415 0x11bc WUDFRd - ok

17:00:21.0464 0x11bc [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

17:00:21.0538 0x11bc wudfsvc - ok

17:00:21.0696 0x11bc [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll

17:00:21.0821 0x11bc WwanSvc - ok

17:00:21.0852 0x11bc [ E8F3FA126A06F8E7088F63757112A186, FC742ECA6DD823C5B17A514EC4473F65EE290FA6501370675B3628FD881A1C4B ] XAudio C:\Windows\system32\DRIVERS\XAudio64.sys

17:00:21.0904 0x11bc XAudio - ok

17:00:22.0061 0x11bc [ 529D9F6C9A3BB3E8450E6EFAF24F9B7D, D492E58BE85A28843C7F6BA221E54233E95690287232B60D202ACE796B807604 ] {C5F942FD-1110-4664-86CE-0C6BDA305235} C:\Program Files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl

17:00:22.0142 0x11bc {C5F942FD-1110-4664-86CE-0C6BDA305235} - ok

17:00:22.0159 0x11bc ================ Scan global ===============================

17:00:22.0221 0x11bc [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll

17:00:22.0274 0x11bc [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

17:00:22.0300 0x11bc [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll

17:00:22.0346 0x11bc [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

17:00:22.0390 0x11bc [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe

17:00:22.0405 0x11bc [ Global ] - ok

17:00:22.0406 0x11bc ================ Scan MBR ==================================

17:00:22.0423 0x11bc [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

17:00:23.0500 0x11bc \Device\Harddisk0\DR0 - ok

17:00:23.0501 0x11bc ================ Scan VBR ==================================

17:00:23.0527 0x11bc [ F6EF5ED9B3851C98387D05A667DF18E7 ] \Device\Harddisk0\DR0\Partition1

17:00:23.0560 0x11bc \Device\Harddisk0\DR0\Partition1 - ok

17:00:23.0580 0x11bc [ 4691890F2496B05508222D7505209A42 ] \Device\Harddisk0\DR0\Partition2

17:00:23.0608 0x11bc \Device\Harddisk0\DR0\Partition2 - ok

17:00:23.0609 0x11bc ================ Scan generic autorun ======================

17:00:23.0680 0x11bc [ E64270B5DB7218E60AD62ED0C52E3A09, E9CC0CA9A19868C34EC782FA9F45617DB81C791393BED68EBF8E38BE2C27F8FA ] c:\program files\gateway\gateway power management\epowertray.exe

17:00:23.0743 0x11bc Acer ePower Management - ok

17:00:24.0061 0x11bc [ 910AFE116ADE17C93E892C38452075F9, E9CBFCF0549CACAC9B40BB67454548F996F1856AAF568D751015A3158F47043A ] c:\program files\realtek\audio\hda\ravcpl64.exe

17:00:24.0486 0x11bc RtHDVCpl - ok

17:00:24.0620 0x11bc [ 20E044420B9A2263E990A2C2DF0983F3, CE306F307ED163FA3E7E2B24678EFB5A17BF7AE66DADDB858340B92C30EB2577 ] C:\Program Files (x86)\Launch Manager\LManager.exe

17:00:24.0718 0x11bc LManager - ok

17:00:24.0819 0x11bc [ AA112662DF90680B9C42883EFD22073B, BA7C0A277AAF7B0532E051CB86A9F4AC814B2D1189BBD9CCCD51AAEAAA5DE17D ] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe

17:00:24.0893 0x11bc KeyScrambler - ok

17:00:24.0953 0x11bc LastApp - ok

17:00:25.0101 0x11bc [ 1D8F25EB5405C8FFFA0DE6EE4E139841, E7D22C1F3694F5B993469308F8750DE575AB27A4388897803632AB91C0D3CEB9 ] C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe

17:00:25.0243 0x11bc bdruninstaller - ok

17:00:25.0351 0x11bc [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

17:00:25.0484 0x11bc Sidebar - ok

17:00:25.0512 0x11bc [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

17:00:25.0608 0x11bc mctadmin - ok

17:00:25.0674 0x11bc [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

17:00:25.0741 0x11bc Sidebar - ok

17:00:25.0768 0x11bc [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe

17:00:25.0800 0x11bc mctadmin - ok

17:00:25.0998 0x11bc [ 0A3E532AE3E0421B01B81D37B2FC766D, BFCE1F20142D5EB181A08531B63935A0D290D828B32BDAC53E808C60721FBA50 ] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe

17:00:26.0137 0x11bc Advanced SystemCare Ultimate - ok

17:00:26.0247 0x11bc [ 0A3E532AE3E0421B01B81D37B2FC766D, BFCE1F20142D5EB181A08531B63935A0D290D828B32BDAC53E808C60721FBA50 ] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe

17:00:26.0352 0x11bc Advanced SystemCare Ultimate - ok

17:00:26.0357 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:27.0357 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:28.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:29.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:30.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:31.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:32.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:33.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:34.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:35.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:36.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:37.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:38.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:39.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:40.0358 0x11bc Waiting for KSN requests completion. In queue: 141

17:00:41.0389 0x11bc AV detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\WSCStub.exe ( 17.9.0.0 ), 0x51000 ( enabled : updated )

17:00:41.0514 0x11bc AV detected via SS2: Advanced SystemCare Ultimate, C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAntivirusFix.exe ( 7.0.0.5008 ), 0x70000 ( disabled : updated )

17:00:41.0516 0x11bc FW detected via SS2: Norton Internet Security, C:\Program Files (x86)\Norton Internet Security\Engine\17.9.0.12\WSCStub.exe ( 17.9.0.0 ), 0x51010 ( enabled )

17:00:44.0037 0x11bc ============================================================

17:00:44.0037 0x11bc Scan finished

17:00:44.0037 0x11bc ============================================================

17:00:44.0045 0x1ac0 Detected object count: 0

17:00:44.0045 0x1ac0 Actual detected object count: 0



#8 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:48 PM

Posted 02 March 2015 - 05:24 PM

Step 1

Please download combofix.pngCombofix (by sUBs) and save it to your Desktop.
  • Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
  • Start Combofix.exe and follow its instructions.
  • Do not use the computer while the scan is running. This may cause the program to stall.
  • When finished, a log file will be displayed (that can also be found at C:\Combofix.txt).
    Please copy and paste the contents of this file into your next post.
Note: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." after the scan, just restart the computer.
(You can find more detailed instructions in this guide on using Combofix.)
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#9 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 07:11 PM

The ComboFix Log is too long, therefore I will send it in two parts"

 

Part 1:

 

ComboFix 15-03-01.01 - Winters 03/02/2015  17:56:36.1.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.4026.1325 [GMT -5:00]
Running from: c:\users\Winters\Desktop\ComboFix.exe
AV: Advanced SystemCare Ultimate *Disabled/Updated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\programdata\680879044ca08e62
c:\programdata\680879044ca08e62\{A3FC46A0-9B62-0EF3-B475-743B3A2762B1}
c:\programdata\680879044ca08e62\{BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8}
c:\programdata\680879044ca08e62\22c3997ee7059bcb80f1124609be0ad0.ini
c:\programdata\680879044ca08e62\91edd5c0e4a2c4a480f1124609be0ad0.ini
c:\programdata\ntuser.pol
c:\users\Winters\AppData\Local\assembly\tmp
c:\users\Winters\AppData\Roaming\Local
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\lastpass.exe
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\nplastpass.dll
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp\nplastpass64.dll
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1125161478\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp120684183\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1405955290\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1507273766\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1658334375\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1702372559\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742162071\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1742270634\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1758992936\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\es_MX\es_MX.xpm



#10 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 07:15 PM

ComboFix : bottom half of Log

 

Part 2

 

c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1775908703\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp1880887635\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp2014939119\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp209191227\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp251794680\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp338737557\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pl_PL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pl_PL\pl_PL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pt_BR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pt_BR\pt_BR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pt_PT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\pt_PT\pt_PT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ro_RO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ro_RO\ro_RO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ru_RU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ru_RU\ru_RU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\si_LK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\si_LK\si_LK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sk_SK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sk_SK\sk_SK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sl_SI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sl_SI\sl_SI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sq_AL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sq_AL\sq_AL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sr_RS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sr_RS\sr_RS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sv_SE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sv_SE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\sv_SE\sv_SE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ta_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ta_IN\ta_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\th_TH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\th_TH\th_TH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\tl_PH\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\tl_PH\tl_PH.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\tr_TR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\tr_TR\tr_TR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\uk_UA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\uk_UA\uk_UA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ur_PK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\ur_PK\ur_PK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\vi_VN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\vi_VN\vi_VN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\zh_CN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\zh_CN\zh_CN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\zh_TW\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\languages\zh_TW\zh_TW.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp480983392\lp_languages.zip
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\af_ZA\af_ZA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\af_ZA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ar_EG\ar_EG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ar_EG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ar_SA\ar_SA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ar_SA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\az_AZ\az_AZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\az_AZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\be_BY\be_BY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\be_BY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bg_BG\bg_BG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bg_BG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bn_BD\bn_BD.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bn_BD\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bs_BA\bs_BA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\bs_BA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ca_ES\ca_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ca_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\cs_CZ\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\da_DK\da_DK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\da_DK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\de_DE\de_DE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\de_DE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\de_DE\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\de_DE\wxstd.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\el_GR\el_GR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\el_GR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_AU\en_AU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_AU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_GB\en_GB.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_GB\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_US\en_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\en_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\eo_US\eo_US.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\eo_US\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\es_ES\es_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\es_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\es_MX\es_MX.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\es_MX\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\et_EE\et_EE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\et_EE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fa_IR\fa_IR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fa_IR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fa_IR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fi_FI\fi_FI.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fi_FI\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fo_FO\fo_FO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fo_FO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fr_CA\fr_CA.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fr_CA\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fr_FR\fr_FR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fr_FR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\fr_FR\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ga_IE\ga_IE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ga_IE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\gl_ES\gl_ES.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\gl_ES\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\gu_IN\gu_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\gu_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\he_IL\he_IL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\he_IL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\he_IL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hi_IN\hi_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hi_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hr_HR\hr_HR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hr_HR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hu_HU\hu_HU.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\hu_HU\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\id_ID\id_ID.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\id_ID\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\is_IS\is_IS.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\is_IS\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\it_IT\it_IT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\it_IT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ja_JP\ja_JP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ja_JP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ka_GE\ka_GE.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ka_GE\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\kn_IN\kn_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\kn_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ko_KR\ko_KR.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ko_KR\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\lt_LT\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\lt_LT\lt_LT.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\lv_LV\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\lv_LV\lv_LV.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mg_MG\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mg_MG\mg_MG.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mk_MK\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mk_MK\mk_MK.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ml_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ml_IN\ml_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mr_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\mr_IN\mr_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ms_MY\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ms_MY\ms_MY.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nb_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nb_NO\nb_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ne_NP\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\ne_NP\ne_NP.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nl_NL\junk.html
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nl_NL\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nl_NL\messages.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nl_NL\nl_NL.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nn_NO\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\nn_NO\nn_NO.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\pa_IN\lastpass.mo
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\languages\pa_IN\pa_IN.xpm
c:\users\Winters\AppData\Roaming\Local\Temp\lptmp629521045\lp_languages.zip
c:\users\Winters2\AppData\Roaming\Local
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\af_ZA.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\ar_EG.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\ar_SA.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\az_AZ.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\be_BY.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\bg_BG.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\bn_BD.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\bs_BA.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\ca_ES.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\cs_CZ.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\da_DK.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\de_DE.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\wxstd.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\el_GR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\en_AU.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\en_GB.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_US\en_US.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\en_US\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\eo_US.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\es_ES.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\es_MX.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\et_EE.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\fa_IR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\fi_FI.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\fo_FO.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\fr_CA.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\fr_FR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\ga_IE.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\gl_ES.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\gu_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\he_IL.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\hi_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\hr_HR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\hu_HU.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\id_ID.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\is_IS.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\it_IT.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\ja_JP.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\ka_GE.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\kn_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\ko_KR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lt_LT.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lv_LV.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\mg_MG.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\mk_MK.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\ml_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\mr_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\ms_MY.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\nb_NO.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\ne_NP.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\junk.html
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\nl_NL.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\nn_NO.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\pa_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\pl_PL.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\pt_BR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\pt_PT.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\ro_RO.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\ru_RU.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\si_LK.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\sk_SK.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\sl_SI.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\sq_AL.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\sr_RS.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\messages.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\sv_SE.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\ta_IN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\th_TH.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\tl_PH.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\tr_TR.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\uk_UA.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\ur_PK.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\vi_VN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\zh_CN.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\lastpass.mo
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\zh_TW.xpm
c:\users\Winters2\AppData\Roaming\Local\Temp\lptmp\lp_languages.zip
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\cdrsgvwb6jl@aaouee-.co.uk
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\cdrsgvwb6jl@aaouee-.co.uk\bootstrap.js
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\cdrsgvwb6jl@aaouee-.co.uk\chrome.manifest
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\cdrsgvwb6jl@aaouee-.co.uk\content\bg.js
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\cdrsgvwb6jl@aaouee-.co.uk\install.rdf
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\qxmt@eooiu.com
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\qxmt@eooiu.com\bootstrap.js
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\qxmt@eooiu.com\chrome.manifest
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\qxmt@eooiu.com\content\bg.js
c:\users\Winters2\AppData\Roaming\Mozilla\Firefox\Profiles\mvsvuwww.default\extensions\staged\qxmt@eooiu.com\install.rdf
c:\windows\msdownld.tmp
c:\windows\SysWow64\drivers\dfg.sys
C:\ZLB4A77.tmp
.
.
(((((((((((((((((((((((((   Files Created from 2015-02-02 to 2015-03-02  )))))))))))))))))))))))))))))))
.
.
2015-03-02 20:24 . 2015-03-02 20:27 -------- d-----w- C:\FRST
2015-03-02 13:06 . 2015-03-02 13:06 129752 ----a-w- c:\windows\system32\drivers\28910BDB.sys
2015-03-01 15:05 . 2015-03-01 15:05 -------- d-----w- c:\program files\Common Files\Bitdefender
2015-02-25 18:53 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-02-25 18:53 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-02-25 18:53 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-02-25 18:53 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-02-23 00:38 . 2015-03-02 20:08 -------- d-----w- c:\program files (x86)\LastPass
2015-02-22 23:36 . 2015-02-22 23:36 -------- d-----w- c:\users\Winters\AppData\Roaming\RegZooka
2015-02-22 06:08 . 2015-02-22 06:08 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2015-02-22 05:21 . 2015-02-22 05:21 -------- d-----w- c:\program files (x86)\DLL Player
2015-02-16 15:46 . 2015-02-16 15:46 105760 ----a-w- c:\windows\system32\KeyScramblerLogon.dll
2015-02-12 15:32 . 2015-01-23 04:41 6041600 ----a-w- c:\windows\system32\jscript9.dll
2015-02-12 15:32 . 2015-01-23 03:43 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2015-02-12 15:32 . 2015-01-23 03:17 4300800 ----a-w- c:\windows\SysWow64\jscript9.dll
2015-02-12 15:32 . 2015-01-23 04:42 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2015-02-11 13:29 . 2014-12-12 05:31 1480192 ----a-w- c:\windows\system32\crypt32.dll
2015-02-11 13:28 . 2015-01-09 02:03 3201536 ----a-w- c:\windows\system32\win32k.sys
2015-02-08 00:42 . 2015-02-08 00:42 -------- d-----w- c:\program files\Microsoft Mouse and Keyboard Center
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-02 23:30 . 2014-07-29 06:17 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-02 20:08 . 2014-12-03 06:09 14242360 ----a-w- c:\program files (x86)\Common Files\lpuninstall.exe
2015-02-12 08:19 . 2010-03-06 14:26 116773704 ----a-w- c:\windows\system32\MRT.exe
2015-02-07 03:37 . 2015-01-21 20:47 223696 ----a-w- c:\windows\system32\drivers\keyscrambler.sys
2015-02-04 20:42 . 2014-12-25 21:07 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-04 20:42 . 2014-12-25 21:07 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-01-29 01:27 . 2014-12-26 03:56 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-12-25 14:33 . 2014-07-29 06:16 96472 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-12-25 00:14 . 2014-12-25 00:14 667648 ----a-w- c:\windows\SysWow64\sangam.dll
2014-12-25 00:14 . 2014-12-25 00:14 2034824 ----a-w- c:\windows\SysWow64\lcppn30.dll
2014-12-25 00:14 . 2014-12-25 00:14 541592 ----a-w- c:\windows\SysWow64\idrskrn14_5.dll
2014-12-25 00:14 . 2014-12-25 00:14 3584 ----a-w- c:\windows\SysWow64\api-ms-win-core-winrt-error-l1-1-0.dll
2014-12-23 04:05 . 2014-12-04 03:00 1668 ----a-w- c:\windows\system32\ASOROSet.bin
2014-12-19 03:06 . 2015-01-13 22:31 210432 ----a-w- c:\windows\system32\profsvc.dll
2014-12-19 01:46 . 2015-01-13 22:31 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2014-12-11 17:47 . 2015-01-13 22:31 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2014-12-08 22:01 . 2014-11-30 18:07 20216 ----a-w- c:\windows\system32\roboot64.exe
2014-12-06 04:17 . 2015-01-13 22:31 303616 ----a-w- c:\windows\system32\nlasvc.dll
2014-12-06 03:50 . 2015-01-13 22:31 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2014-12-06 03:50 . 2015-01-13 22:31 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare Ultimate"="c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe" [2014-04-09 2529088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 1157640]
"KeyScrambler"="c:\program files (x86)\KeyScrambler\keyscrambler.exe" [2015-02-16 509216]
"LastApp"="c:\program files (x86)\LastPass\lastapp.exe" [2015-02-18 29105768]
"bdruninstaller"="c:\program files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" [2014-08-08 519472]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Install LastPass FF RunOnce.lnk - c:\program files (x86)\Common Files\lpuninstall.exe -q -name=LastPass -ffuuid support@lastpass.com [2014-12-3 14242360]
Install LastPass IE RunOnce.lnk - c:\program files (x86)\Common Files\lpuninstall.exe -p -name=LastPass -ffuuid support@lastpass.com [2014-12-3 14242360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R2 lxebCATSCustConnectService;lxebCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxebserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxebserv.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys;c:\windows\SYSNATIVE\Drivers\androidusb.sys [x]
R3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 dfg;dfg;c:\windows\system32\drivers\dfg.sys;c:\windows\SYSNATIVE\drivers\dfg.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 PTUMWBus;PANTECH USB Modem V2 Composite Device Driver;c:\windows\system32\DRIVERS\PTUMWBus.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWBus.sys [x]
R3 PTUMWCDF;PANTECH USB Modem V2 Installation CD;c:\windows\system32\DRIVERS\PTUMWCDF.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWCDF.sys [x]
R3 PTUMWFLT;PTUMWNET Filter Driver;c:\windows\system32\DRIVERS\PTUMWFLT.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWFLT.sys [x]
R3 PTUMWMdm;PANTECH USB Modem V2 Modem Driver;c:\windows\system32\DRIVERS\PTUMWMdm.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWMdm.sys [x]
R3 PTUMWNET;PANTECH USB Modem V2 WWAN Driver;c:\windows\system32\DRIVERS\PTUMWNET.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWNET.sys [x]
R3 PTUMWVsp;PANTECH USB Modem V2 Diagnostic Port;c:\windows\system32\DRIVERS\PTUMWVsp.sys;c:\windows\SYSNATIVE\DRIVERS\PTUMWVsp.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\NISx64\1008000.029\SYMNDISV.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1008000.029\SYMNDISV.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1109000.00C\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1109000.00C\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1109000.00C\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1109000.00C\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20150224.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20150224.001\BHDrvx64.sys [x]
S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NISx64\1109000.00C\ccHPx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1109000.00C\ccHPx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20150227.003\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20150227.003\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1109000.00C\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1109000.00C\Ironx64.SYS [x]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NISx64\1109000.00C\SYMTDIV.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1109000.00C\SYMTDIV.SYS [x]
S2 {C5F942FD-1110-4664-86CE-0C6BDA305235};Power Control [2014/08/24 16:10];c:\program files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl;c:\program files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [x]
S2 ASCAntivirusSrv;AdvancedSystemCareAntivirus;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Gateway\Gateway Power Management\ePowerSvc.exe;c:\program files\Gateway\Gateway Power Management\ePowerSvc.exe [x]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe;c:\program files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Gateway\Registration\GregHSRW.exe;c:\program files (x86)\Gateway\Registration\GregHSRW.exe [x]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 lxeb_device;lxeb_device;c:\windows\system32\lxebcoms.exe;c:\windows\SYSNATIVE\lxebcoms.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe [x]
S2 Updater Service;Updater Service;c:\program files\Gateway\Gateway Updater\UpdaterService.exe;c:\program files\Gateway\Gateway Updater\UpdaterService.exe [x]
S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys;c:\windows\SYSNATIVE\DRIVERS\CAXHWAZL.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
S3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys;c:\windows\SYSNATIVE\drivers\keyscrambler.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder
.
2015-03-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25 20:42]
.
2015-02-28 c:\windows\Tasks\Norton Security Scan for Winters.job
- c:\progra~2\NORTON~3\Engine\301~1.8\Nss.exe [2011-01-21 06:45]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2015-01-15 13:11 2471744 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer ePower Management"="c:\program files\gateway\gateway power management\epowertray.exe" [2009-09-30 823840]
"RtHDVCpl"="c:\program files\realtek\audio\hda\ravcpl64.exe" [2009-07-28 7982112]
.
------- Supplementary Scan -------
.
uStart Page = about:tabs
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: LastPass - file://c:\users\Winters\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Winters\AppData\LocalLow\LastPass\context.html?cmd=fillforms
Trusted Zone: backdoors.to\www
Trusted Zone: paypal.com\www
Trusted Zone: pogo.com
Trusted Zone: pogo.com\game3
Trusted Zone: pogo.com\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-{C1C3E833-420E-4D78-9BA7-86AEBB272384} - c:\users\Winters\AppData\Local\TopArcadeHits\uninstaller.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\17.9.0.12\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\{C5F942FD-1110-4664-86CE-0C6BDA305235}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD14\Common\NavFilter\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"=hex:51,66,7a,6c,4c,1d,38,12,8d,ec,f8,
   7b,2b,25,27,06,e7,c4,bc,f0,98,15,0d,de
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}"=hex:51,66,7a,6c,4c,1d,38,12,57,36,90,
   43,f7,9e,4b,04,e0,be,4b,59,e7,b4,e8,87
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
   1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}"=hex:51,66,7a,6c,4c,1d,38,12,60,d8,39,
   64,cd,04,79,07,f5,b7,d6,9a,c1,81,e0,1c
"{6D53EC84-6AAE-4787-AEEE-F4628F01010C}"=hex:51,66,7a,6c,4c,1d,38,12,ea,ef,40,
   69,9c,24,e9,02,d1,f8,b7,22,8a,5f,45,18
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}"=hex:51,66,7a,6c,4c,1d,38,12,0f,32,96,
   76,f7,7e,4c,08,c8,ef,48,fc,18,66,e7,6a
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
   72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
   94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AE7CD045-E861-484F-8273-0445EE161910}"=hex:51,66,7a,6c,4c,1d,38,12,2b,d3,6f,
   aa,53,a6,21,0d,fd,65,47,05,eb,48,5d,04
"{B4F3A835-0E21-4959-BA22-42B3008E02FF}"=hex:51,66,7a,6c,4c,1d,38,12,5b,ab,e0,
   b0,13,40,37,0c,c5,34,01,f3,05,d0,46,eb
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
   df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{F4971EE7-DAA0-4053-9964-665D8EE6A077}"=hex:51,66,7a,6c,4c,1d,38,12,89,1d,84,
   f0,92,94,3d,05,e6,72,25,1d,8b,b8,e4,63
"{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}"=hex:51,66,7a,6c,4c,1d,38,12,8f,19,47,
   2e,c4,15,0b,03,d7,b5,8c,e9,62,70,06,85
"{7F6AFBF1-E065-4627-A2FD-810366367D01}"=hex:51,66,7a,6c,4c,1d,38,12,9f,f8,79,
   7b,57,ae,49,03,dd,eb,c2,43,63,68,39,15
"{A7A9D7E7-E0C0-4202-9F13-6A06BD073CDA}"=hex:51,66,7a,6c,4c,1d,38,12,89,d4,ba,
   a3,f2,ae,6c,07,e0,05,29,46,b8,59,78,ce
"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,
   aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83
"{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}"=hex:51,66,7a,6c,4c,1d,38,12,e3,94,1f,
   be,3b,97,d8,0c,d0,f4,c8,9e,21,03,83,f2
"{D77AA852-DEF3-43CB-A3F5-BD679DE72F32}"=hex:51,66,7a,6c,4c,1d,38,12,3c,ab,69,
   d3,c1,90,a5,06,dc,e3,fe,27,98,b9,6b,26
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ec,9e,0f,55,38,07,27,43,93,06,31,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ec,9e,0f,55,38,07,27,43,93,06,31,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,e6,07,36,25,bd,b6,07,4a,a8,b9,5c,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\0a\04\0d\0f%\07?"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Wondershare\Wondershare Helper Compact\1819043176\\v1.0\;c:\program files (x86)\Samsung\Samsung PC Studio 3\;c:\program files (x86)\Windows Live\Shared*PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC*PROCESSOR_ARCHITECTURE=x86*PROCESSOR_ARCHITEW6432=AMD64*PROCESSOR_IDENTIFIER=Intel64 Family ]
"JoinUserExperience"=dword:00000001
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\IObit\Advanced SystemCare Ultimate 7\Monitor.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
**************************************************************************
.
Completion time: 2015-03-02  18:39:22 - machine was rebooted
ComboFix-quarantined-files.txt  2015-03-02 23:39
.
Pre-Run: 350,954,053,632 bytes free
Post-Run: 351,220,887,552 bytes free
.
- - End Of File - - BA08B05281B805EA6F886400F94A0D9E
A36C5E4F47E84449FF07ED3517B43A31
 



#11 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 07:20 PM

After ComboFix scan, PC is acting very irratic and the CPU temperature is hovering between 79 to 100. PC SLOW. I had this problem a few months ago and found a tweak online which brought my CPU hovering between 2 to 50. But I do not remember what that tweak was or where I found it. Darn......



#12 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 02 March 2015 - 09:27 PM

I have identified the source of my high CPU and corrected it.



#13 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:48 PM

Posted 03 March 2015 - 05:41 AM

OK,

next steps are:

Step 1

Please download adwcleaner.png AdwCleaner (by Xplode) and save it to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select "Run As Administrator"
  • Click on the Scan button.
  • After the scan has finished, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • After rebooting, a log file (that is saved in C:\AdwCleaner[S#].txt) will open automatically.
    Copy and paste the contents of that logfile in your next reply.
Step 2
Scan with mbam.pngMalwarebytes Anti-Malware
  • Please open Malwarebytes Anti-Malware.
  • Please update the database by clicking on the "Update Now" button.
  • Following the update and click "Settings" [1] and go to "Detection and Protection" [2]
  • Make sure "Scan for Rootkits" is checked.
  • Click on Dashboard [3], then click on Scan Now [4] to start the scan.
    :exclame: If Malware or Potentially Unwanted Programs [PUPs] are found, you will receive a prompt so that you can decide what you want to do. I suggest "Quarantine All" [5]. Then click the button: Apply Actions. [6]
  • A window with an option to view the detailed log will appear.
    mbamlog.png
  • Click on "View detailed log".
  • After viewing the results, please click on the "Copy to Clipboard" button and then OK.
  • Return to our forum. Paste your log into your next reply.
mbameng.gif


Step 3

Please download fss.pngFarbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.
Step 4

frst.pngfrstscan.png

Start FRST with administator privileges.
  • Make sure the following option is checked: addition.png
  • Press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
    Please copy and paste these logs in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#14 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 03 March 2015 - 10:25 AM

I am attempting to perform the task per your last instruction by running ADWCleaner. It has been idle for 30 mins, giving me a message that reads "Waiting for action. Please Check elements you want to keep". Is this normal for it to take scan this long? The Cleaning box has a X on it and reads "cleaning". However, I never checked the cleaning button because I never got any notice that the scan was finished. If you want me to upload a snip so you can see, I can do that. What should I do.... just wait?



#15 MdHelp

MdHelp
  • Topic Starter

  • Members
  • 120 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:48 AM

Posted 03 March 2015 - 10:46 AM

# AdwCleaner v4.111 - Logfile created 03/03/2015 at 10:31:33
# Updated 18/02/2015 by Xplode
# Database : 2015-03-02.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Winters - WINTERS-PC
# Running from : C:\Users\Winters\Desktop\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\browser enhancer
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\ProgramData\Uniblue
Folder Deleted : C:\ProgramData\Zoomex
Folder Deleted : C:\ProgramData\BiiteSaver
Folder Deleted : C:\ProgramData\RooboSaever
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoomex
Folder Deleted : C:\Program Files (x86)\Bench
Folder Deleted : C:\Program Files (x86)\GetPrivate
Folder Deleted : C:\Program Files (x86)\lucky leap
Folder Deleted : C:\Program Files (x86)\predm
Folder Deleted : C:\Program Files (x86)\Zoomex
Folder Deleted : C:\Program Files (x86)\BiiteSaver
Folder Deleted : C:\Program Files (x86)\RooboSaever
Folder Deleted : C:\Users\Winters\AppData\Local\Conduit
Folder Deleted : C:\Users\Winters\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Winters\AppData\LocalLow\Zoomex
Folder Deleted : C:\Users\Winters\AppData\Roaming\RegClean Pro
Folder Deleted : C:\Users\Winters\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\Extensions\ascsurfingprotection@iobit.com
Folder Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\nzpxpjls.default\Extensions\ascsurfingprotection@iobit.com
Folder Deleted : C:\ProgramData\maniccjaommjegbmokkikphjpiemhnha
File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\invalidprefs.js
File Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\searchplugins\bingp.xml
File Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\84salk1h.default-1390258716229\user.js
File Deleted : C:\Users\Winters\AppData\Roaming\Mozilla\Firefox\Profiles\nzpxpjls.default\user.js

***** [ Scheduled tasks ] *****

Task Deleted : DTChk
Task Deleted : DTReg
Task Deleted : RegClean Pro_DEFAULT
Task Deleted : RegClean Pro_UPDATES

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6F4B3B0A-2AEF-4C84-BBD6-8815EE40C084}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\PrivitizeVPNInstallDates
Key Deleted : HKCU\Software\Proxy
Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\Browser Extensions
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\SOFTWARE\Bench
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\ParetoLogic
Key Deleted : HKLM\SOFTWARE\Proxy
Key Deleted : HKLM\SOFTWARE\SP Global
Key Deleted : HKLM\SOFTWARE\SProtector
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631

-\\ Mozilla Firefox v33.0.3 (x86 en-US)

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [7196 bytes] - [03/03/2015 09:38:50]
AdwCleaner[S0].txt - [6129 bytes] - [03/03/2015 10:31:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6188  bytes] ##########






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users