Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

System running slow and crashing a lot - ran recommended Security and Cleanup


  • This topic is locked This topic is locked
16 replies to this topic

#1 PowerCAD

PowerCAD

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 12:35 PM

I recently had to replace my CPU and Motherboard.  The folks that built my computer replaced these items for me.  I've been noticing a lot of crashing and slow down of the computer.  Last year you guys had me run the following on my computer to clean it up and get it running smoother. I use Autodesk Civil3D software for my business.  

 

 

This is the order of operations I used to do the cleanup per previous recommendations by you guys last year, is this still what I should do?

1.      MiniToolBox

2.      Malwarebytes (MBAM)

3.      TDSS Killer

4.      AdwCleaner

5.      Junkware Removal Tool (Shut down protection software to avoid conflicts)

6.      AdwCleaner

7.      ESET Online Scanner

8.      Update (MBAM) and rerun

9.      TFC



BC AdBot (Login to Remove)

 


#2 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 12:41 PM

Here is the MiniToolBox Report...

 

MiniToolBox by Farbar  Version: 02-11-2015
Ran by Yvonne (administrator) on 24-11-2015 at 09:37:36
Running from "C:\Users\Yvonne\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Model: System Product Name Manufacturer: System manufacturer
Boot Mode: Normal
***************************************************************************
 
========================= Flush DNS: ===================================
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========================= IE Proxy Settings: ============================== 
 
Proxy is not enabled.
No Proxy Server is set.
 
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================
========================= IP Configuration: ================================
 
Realtek PCIe GBE Family Controller = Local Area Connection (Connected)
 
 
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
 
reset
set global icmpredirects=enabled
 
 
popd
# End of IPv4 configuration
 
 
 
Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : Server
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : hsd1.ca.comcast.net
 
Ethernet adapter Local Area Connection:
 
   Connection-specific DNS Suffix  . : hsd1.ca.comcast.net
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : E0-3F-49-7B-B5-2D
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2601:645:0:eb6f::7c1c(Preferred) 
   Lease Obtained. . . . . . . . . . : Tuesday, November 24, 2015 9:10:55 AM
   Lease Expires . . . . . . . . . . : Tuesday, December 01, 2015 9:10:55 AM
   IPv6 Address. . . . . . . . . . . : 2601:645:0:eb6f:7949:3ad6:d0da:364(Preferred) 
   Temporary IPv6 Address. . . . . . : 2601:645:0:eb6f:4416:85c8:d4aa:3da7(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::7949:3ad6:d0da:364%11(Preferred) 
   IPv4 Address. . . . . . . . . . . : 10.0.0.183(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, November 24, 2015 9:10:58 AM
   Lease Expires . . . . . . . . . . : Tuesday, December 01, 2015 9:10:58 AM
   Default Gateway . . . . . . . . . : fe80::68ee:96ff:fe2e:76cc%11
                                       10.0.0.1
   DHCP Server . . . . . . . . . . . : 10.0.0.1
   DHCPv6 IAID . . . . . . . . . . . : 249577289
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-50-8F-86-E0-3F-49-7B-B5-2D
   DNS Servers . . . . . . . . . . . : 2001:558:feed::1
                                       2001:558:feed::2
                                       75.75.75.75
                                       75.75.76.76
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Tunnel adapter isatap.hsd1.ca.comcast.net:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : hsd1.ca.comcast.net
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
 
Tunnel adapter Teredo Tunneling Pseudo-Interface:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  cdns01.comcast.net
Address:  2001:558:feed::1
 
Name:    google.com
Addresses:  2607:f8b0:4007:803::1000
 74.125.224.67
 74.125.224.72
 74.125.224.73
 74.125.224.65
 74.125.224.64
 74.125.224.78
 74.125.224.66
 74.125.224.69
 74.125.224.68
 74.125.224.71
 74.125.224.70
 
 
Pinging google.com [2607:f8b0:4007:803::1000] with 32 bytes of data:
Reply from 2607:f8b0:4007:803::1000: time=26ms 
Reply from 2607:f8b0:4007:803::1000: time=24ms 
 
Ping statistics for 2607:f8b0:4007:803::1000:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 24ms, Maximum = 26ms, Average = 25ms
Server:  cdns01.comcast.net
Address:  2001:558:feed::1
 
Name:    yahoo.com
Addresses:  2001:4998:44:204::a7
 2001:4998:58:c02::a9
 2001:4998:c:a06::2:4008
 98.138.253.109
 98.139.183.24
 206.190.36.45
 
 
Pinging yahoo.com [2001:4998:44:204::a7] with 32 bytes of data:
Reply from 2001:4998:44:204::a7: time=109ms 
Reply from 2001:4998:44:204::a7: time=112ms 
 
Ping statistics for 2001:4998:44:204::a7:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 109ms, Maximum = 112ms, Average = 110ms
 
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
 
Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 11...e0 3f 49 7b b5 2d ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
 13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
 
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         10.0.0.1       10.0.0.183     10
         10.0.0.0    255.255.255.0         On-link        10.0.0.183    266
       10.0.0.183  255.255.255.255         On-link        10.0.0.183    266
       10.0.0.255  255.255.255.255         On-link        10.0.0.183    266
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link        10.0.0.183    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link        10.0.0.183    266
===========================================================================
Persistent Routes:
  None
 
IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 11    266 ::/0                     fe80::68ee:96ff:fe2e:76cc
  1    306 ::1/128                  On-link
 11     18 2601:645:0:eb6f::/64     On-link
 11    266 2601:645:0:eb6f::7c1c/128
                                    On-link
 11    266 2601:645:0:eb6f:4416:85c8:d4aa:3da7/128
                                    On-link
 11    266 2601:645:0:eb6f:7949:3ad6:d0da:364/128
                                    On-link
 11    266 fe80::/64                On-link
 11    266 fe80::7949:3ad6:d0da:364/128
                                    On-link
  1    306 ff00::/8                 On-link
 11    266 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================
 
Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648] (Microsoft Corp.)
Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648] (Microsoft Corp.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760] (Microsoft Corp.)
x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760] (Microsoft Corp.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (11/24/2015 09:29:12 AM) (Source: Application Error) (User: )
Description: Faulting application name: Amazon Music.exe, version: 3.10.0.0, time stamp: 0x55adcfb4
Faulting module name: Amazon Music.exe, version: 3.10.0.0, time stamp: 0x55adcfb4
Exception code: 0x40000015
Fault offset: 0x0024ce78
Faulting process id: 0x7fc
Faulting application start time: 0xAmazon Music.exe0
Faulting application path: Amazon Music.exe1
Faulting module path: Amazon Music.exe2
Report Id: Amazon Music.exe3
 
Error: (11/24/2015 09:10:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/24/2015 08:37:30 AM) (Source: Application Hang) (User: )
Description: The program acad.exe version 26.1.49.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem 
 
history in the Action Center control panel.
 
Process ID: 1418
 
Start Time: 01d126d5b75b35fc
 
Termination Time: 56
 
Application Path: C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Report Id:
 
Error: (11/24/2015 08:32:26 AM) (Source: Application Hang) (User: )
Description: The program acad.exe version 26.1.49.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem 
 
history in the Action Center control panel.
 
Process ID: 1750
 
Start Time: 01d126d4903f9214
 
Termination Time: 59
 
Application Path: C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Report Id:
 
Error: (11/24/2015 08:24:25 AM) (Source: Application Error) (User: )
Description: Faulting application name: WSCommCntr4.exe, version: 4.0.3.0, time stamp: 0x52df746e
Faulting module name: WSCommCntr4.exe, version: 4.0.3.0, time stamp: 0x52df746e
Exception code: 0xc0000005
Fault offset: 0x0000000000015a1e
Faulting process id: 0x16bc
Faulting application start time: 0xWSCommCntr4.exe0
Faulting application path: WSCommCntr4.exe1
Faulting module path: WSCommCntr4.exe2
Report Id: WSCommCntr4.exe3
 
Error: (11/24/2015 08:21:44 AM) (Source: Application Hang) (User: )
Description: The program acad.exe version 26.1.49.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem 
 
history in the Action Center control panel.
 
Process ID: 12c4
 
Start Time: 01d126c5073c79d4
 
Termination Time: 58
 
Application Path: C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Report Id:
 
Error: (11/24/2015 08:20:07 AM) (Source: Application Hang) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the 
 
problem history in the Action Center control panel.
 
Process ID: 838
 
Start Time: 01d126c47771316f
 
Termination Time: 19
 
Application Path: C:\Windows\Explorer.EXE
 
Report Id: 3698ef46-92c7-11e5-bb78-e03f497bb52d
 
Error: (11/24/2015 06:20:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/20/2015 10:38:08 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/15/2015 09:12:17 PM) (Source: Chrome) (User: NT AUTHORITY)
Description: Chrome has encountered a fatal error.
ver=46.0.2490.86;lang=;guid=DCCED39931B943048683011BB07AECEB;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\ed0ca504-1fae-
 
418b-9261-3df2c62b0db0.dmp
 
 
System errors:
=============
Error: (11/24/2015 09:10:54 AM) (Source: Service Control Manager) (User: )
Description: The LogMeIn Kernel Information Provider service failed to start due to the following error: 
%%3
 
Error: (11/24/2015 09:09:58 AM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed 
 
with the following error: 
%%1056
 
Error: (11/24/2015 09:09:29 AM) (Source: Service Control Manager) (User: )
Description: The BrYNSvc service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (11/24/2015 09:09:28 AM) (Source: Service Control Manager) (User: )
Description: The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the 
 
service.
 
Error: (11/24/2015 09:09:28 AM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
 
Error: (11/24/2015 09:09:28 AM) (Source: Service Control Manager) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 
 
milliseconds: Restart the service.
 
Error: (11/24/2015 09:09:28 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (11/24/2015 09:09:28 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (11/24/2015 09:09:27 AM) (Source: Service Control Manager) (User: )
Description: The Windows Live ID Sign-in Assistant service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: 
 
Restart the service.
 
Error: (11/24/2015 09:09:27 AM) (Source: Service Control Manager) (User: )
Description: The Remote Procedure Call (RPC) Net service terminated unexpectedly.  It has done this 1 time(s).
 
 
Microsoft Office Sessions:
=========================
Error: (11/24/2015 09:29:12 AM) (Source: Application Error)(User: )
Description: Amazon Music.exe3.10.0.055adcfb4Amazon Music.exe3.10.0.055adcfb4400000150024ce787fc01d126dd933fb61dC:\Users\Yvonne\AppData\Local\Amazon Music\Amazon 
 
Music.exeC:\Users\Yvonne\AppData\Local\Amazon Music\Amazon Music.exee04294ce-92d0-11e5-b215-e03f497bb52d
 
Error: (11/24/2015 09:10:56 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/24/2015 08:37:30 AM) (Source: Application Hang)(User: )
Description: acad.exe26.1.49.0141801d126d5b75b35fc56C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Error: (11/24/2015 08:32:26 AM) (Source: Application Hang)(User: )
Description: acad.exe26.1.49.0175001d126d4903f921459C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Error: (11/24/2015 08:24:25 AM) (Source: Application Error)(User: )
Description: WSCommCntr4.exe4.0.3.052df746eWSCommCntr4.exe4.0.3.052df746ec00000050000000000015a1e16bc01d126c50e3ca539C:\Program Files\Common Files\Autodesk 
 
Shared\WSCommCntr4\Lib\WSCommCntr4.exeC:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\Lib\WSCommCntr4.exed315724b-92c7-11e5-bb78-e03f497bb52d
 
Error: (11/24/2015 08:21:44 AM) (Source: Application Hang)(User: )
Description: acad.exe26.1.49.012c401d126c5073c79d458C:\Program Files\Autodesk\AutoCAD 2016\acad.exe
 
Error: (11/24/2015 08:20:07 AM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.1756783801d126c47771316f19C:\Windows\Explorer.EXE3698ef46-92c7-11e5-bb78-e03f497bb52d
 
Error: (11/24/2015 06:20:11 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/20/2015 10:38:08 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 
 
990x80041003
 
Error: (11/15/2015 09:12:17 PM) (Source: Chrome)(User: NT AUTHORITY)
Description: Chrome has encountered a fatal error.
ver=46.0.2490.86;lang=;guid=DCCED39931B943048683011BB07AECEB;is_machine=1;oop=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\ed0ca504-1fae-
 
418b-9261-3df2c62b0db0.dmp
 
 
=========================== Installed Programs ============================
 
A360 Desktop (HKLM\...\{B209E611-5511-4AD6-B4B3-9D36F93DBCD4}) (Version: 6.0.3.1100 - Autodesk)
Able2Extract 8.0 (HKLM-x32\...\{49272E0B-CF97-4BD6-85A0-9B1C59495851}_is1) (Version: 8.0 - Investintech.com Inc.)
ACA & MEP 2016 Object Enabler (HKLM\...\{5783F2D7-F004-0000-5102-0060B0CE6BBA}) (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{5783F2D7-F001-0000-3102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.203 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version:  - Amazon)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.10.0.928 - Amazon Services LLC)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.000 - Asmedia Technology)
AutoCAD 2016 - English (HKLM\...\{5783F2D7-F001-0409-2102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (HKLM\...\{5783F2D7-F001-0000-0102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - English (HKLM\...\{5783F2D7-F001-0409-1102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 VBA Enabler (HKLM\...\{8AEE5F98-BCE4-414C-01FC-BC3133553F06}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD Architecture 2016 Language Shared - English (HKLM\...\{5783F2D7-F004-0409-4102-0060B0CE6BBA}) (Version: 7.8.44.0 - Autodesk) Hidden
AutoCAD Architecture 2016 Shared (HKLM\...\{5783F2D7-F004-0000-4102-0060B0CE6BBA}) (Version: 7.8.44.0 - Autodesk) Hidden
AutoCAD Civil 3D Matterhorn Private Pack (HKLM\...\{5783F2D7-F000-0000-3102-0060B0CE6BBA}) (Version: 10.5.604.0 - Autodesk) Hidden
AutoCAD Raster Design 2016 (HKLM\...\{5783F2D7-F031-0409-0102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD Utility Design 2015 - English Extension 1 (HKLM\...\AutoCAD Utility Design 2015 - English SP1) (Version: 1 - Autodesk)
AutoCAD Utility Design 2016 - English (HKLM\...\{5783F2D7-F022-0409-2102-0060B0CE6BBA}) (Version: 5.0.39.0 - Autodesk) Hidden
AutoCAD Utility Design 2016 - English Private Pack (HKLM\...\{5783F2D7-F022-0000-3102-0060B0CE6BBA}) (Version: 5.0.39.0 - Autodesk) Hidden
AutoCAD Utility Design 2016 Core (HKLM\...\{5783F2D7-F022-0000-0102-0060B0CE6BBA}) (Version: 5.0.39.0 - Autodesk) Hidden
AutoCAD Utility Design 2016 Language Core - English (HKLM\...\{5783F2D7-F022-0409-1102-0060B0CE6BBA}) (Version: 5.0.39.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk)
Autodesk App Manager (2016) (HKLM-x32\...\{4ECF9E00-2978-46AF-BD80-455EFEAB7A93}) (Version: 2.0.0 - Autodesk)
Autodesk AutoCAD 2016 - English (HKLM\...\AutoCAD 2016 - English) (Version: 20.1.49.0 - Autodesk)
Autodesk AutoCAD 2016 Hotfix 1 (HKLM\...\AutoCAD 2016 Hotfix 2) (Version:  - Autodesk)
Autodesk AutoCAD 2016 Hotfix 2 (HKLM\...\AutoCAD 2016 Hotfix 3) (Version:  - Autodesk)
Autodesk AutoCAD 2016 VBA Enabler (HKLM\...\AutoCAD 2016 VBA Enabler) (Version: 20.1.49.0 - Autodesk)
Autodesk AutoCAD Civil 3D 2015 64 Bit Object Enabler on Autodesk 360 - Language Neutral (HKLM\...\{EA3E29BC-C9D1-4941-9744-1C7C7509B1DE}) (Version: 524.0 - Autodesk, 
 
Inc.)
Autodesk AutoCAD Civil 3D 2016 - English (HKLM\...\{5783F2D7-F000-0409-2102-0060B0CE6BBA}) (Version: 10.5.604.0 - Autodesk) Hidden
Autodesk AutoCAD Civil 3D 2016 - English (HKLM\...\Autodesk AutoCAD Civil 3D 2016 - English) (Version: 10.5.604.0 - Autodesk)
Autodesk AutoCAD Civil 3D 2016 (HKLM\...\{5783F2D7-F000-0000-0102-0060B0CE6BBA}) (Version: 10.5.768.0 - Autodesk) Hidden
Autodesk AutoCAD Civil 3D 2016 32 Bit Object Enabler on Autodesk Storm and Sanitary Analysis 2016 - Language Neutral (HKLM-x32\...\{85EE0942-2678-442C-A9FC-
 
A31CB3E11571}) (Version: 604.0 - Autodesk, Inc.)
Autodesk AutoCAD Civil 3D 2016 64 Bit Object Enabler on AutoCAD 2016 - English - English (United States) (HKLM\...\{8D6A532F-64A4-4DF1-A23F-54AF859253EC}) (Version: 604.0 
 
- Autodesk, Inc.)
Autodesk AutoCAD Civil 3D 2016 Language Pack - English (HKLM\...\{5783F2D7-F000-0409-1102-0060B0CE6BBA}) (Version: 10.5.604.0 - Autodesk) Hidden
Autodesk AutoCAD Civil 3D 2016 SP1 (HKLM\...\Autodesk AutoCAD Civil 3D 2016 SP1) (Version: 10.5.768.0 - Autodesk)
Autodesk AutoCAD Map 3D 2016 - English (HKLM\...\{5783F2D7-F002-0409-2102-0060B0CE6BBA}) (Version: 19.0.020.16 - Autodesk) Hidden
Autodesk AutoCAD Map 3D 2016 - English (HKLM\...\Autodesk AutoCAD Map 3D 2016 - English) (Version: 19.0.020.16 - Autodesk)
Autodesk AutoCAD Map 3D 2016 (HKLM\...\{5783F2D7-F002-0000-0102-0060B0CE6BBA}) (Version: 19.0.020.16 - Autodesk) Hidden
Autodesk AutoCAD Map 3D 2016 Language Pack - English (HKLM\...\{5783F2D7-F002-0409-1102-0060B0CE6BBA}) (Version: 19.0.020.16 - Autodesk) Hidden
Autodesk AutoCAD Map 3D 2016 Private (HKLM\...\{5783F2D7-F002-0000-3102-0060B0CE6BBA}) (Version: 19.0.020.16 - Autodesk) Hidden
Autodesk AutoCAD Performance Feedback Tool 1.2.4 (HKLM-x32\...\{4E20873D-BC20-495C-AFD9-B18877B7F9BB}) (Version: 1.2.4.0 - Autodesk)
Autodesk AutoCAD Raster Design 2016 (HKLM\...\AutoCAD Raster Design 2016) (Version: 20.1.49.0 - Autodesk)
Autodesk AutoCAD Utility Design 2016 - English (HKLM\...\AutoCAD Utility Design 2016 - English) (Version: 5.0.39.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit (HKLM\...\{3C015DA2-3E9A-4391-803D-F0B698B7E04D}) (Version: 4.35.3969 - Autodesk)
Autodesk BIM 360 Navisworks Simulate 2015 Add-in 64 bit (HKLM\...\{6D74ECFC-F12D-4DAF-ACD8-8BCE85504C54}) (Version: 3.32.3004 - Autodesk)
Autodesk BIM 360 Revit 2015 Add-in 64 bit (HKLM\...\{37E1C3A1-7DBF-4250-9314-46167B68383D}) (Version: 3.32.3357 - Autodesk)
Autodesk DirectConnect 2016 64-bit (HKLM\...\{7A12802C-4864-423D-9732-3A22577CE006}) (Version: 10.0.110.1 - Autodesk) Hidden
Autodesk DirectConnect 2016 64-bit (HKLM\...\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.110.1 - Autodesk)
Autodesk Download Manager (HKLM-x32\...\{EC92633C-8F08-470A-BCDF-3FE5FD778C8D}) (Version: 4.0.14.0 - Autodesk, Inc.)
Autodesk Featured Apps (2016) (HKLM-x32\...\{D42F37CD-9AF9-4435-A474-B387C5BB6B47}) (Version: 2.0.0 - Autodesk)
Autodesk InfraWorks Content (HKLM\...\{58E36D07-5000-0000-2102-C854F44898ED}) (Version: 15.1.52.0 - Autodesk) Hidden
Autodesk InfraWorks Language Pack (HKLM\...\{58E36D07-5000-0000-1102-C854F44898ED}) (Version: 15.1.52.0 - Autodesk) Hidden
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.19 - Autodesk)
Autodesk ReCap 2016 (HKLM\...\{F6FD1651-0000-1033-0102-387BAF9B3B0A}) (Version: 1.5.0.33 - Autodesk) Hidden
Autodesk ReCap 2016 (HKLM\...\Autodesk ReCap 2016) (Version: 1.5.0.33 - Autodesk)
Autodesk Storm and Sanitary Analysis 2016 (HKLM-x32\...\{5681035C-291C-4BE3-B20E-0F0472834883}) (Version: 10.1.53 - Autodesk, Inc.)
Autodesk Storm and Sanitary Analysis 2016 (HKLM-x32\...\Autodesk Storm and Sanitary Analysis 2016) (Version:  - )
Autodesk Storm and Sanitary Analysis 2016 x64 Plug-in (HKLM\...\{A225C652-5B4B-433D-8E22-AC0F77C2842E}) (Version: 10.1.53 - Autodesk, Inc.)
Autodesk Subassembly Composer on Autodesk AutoCAD Civil 3D 2016 - English - English (United States) (HKLM\...\{262CA44C-9BB1-4545-B2B0-7D267CB7A420}) (Version: 604.0 - 
 
Autodesk, Inc.)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Bluebeam Revu x64 12 (HKLM\...\{81D4867E-366F-4F34-A1C2-DF819B7BCF00}) (Version: 12.1.0 - Bluebeam Software) Hidden
Bluebeam Revu x64 12 (HKLM-x32\...\InstallShield_{81D4867E-366F-4F34-A1C2-DF819B7BCF00}) (Version: 12.1.0 - Bluebeam Software)
Brother MFL-Pro Suite MFC-J6910DW (HKLM-x32\...\{17795164-3BC1-4D4F-8ADA-65C895EBFC9A}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Citrix Online Launcher (HKLM-x32\...\{DB014C85-A264-4BCA-A66F-6DD1FCF8EC36}) (Version: 1.0.335 - Citrix)
CompugraphX 100 Plus Hatch Patterns (HKLM-x32\...\{2FAF3F15-F7DC-45A9-B920-27C552CCC73E}) (Version: 10.00.0000 - CompugraphX)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
Dropbox (HKCU\...\Dropbox) (Version: 3.10.11 - Dropbox, Inc.)
FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production)
FARO LS 1.1.503.3 (64bit) (HKLM-x32\...\{1C05E654-FB81-4274-BF32-292E3707701D}) (Version: 5.3.3.38662 - FARO Scanner Production)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.28.15 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GoToAssist Customer 2.5.0.888 (HKLM-x32\...\GoToAssist Express Customer) (Version: 2.5.0.888 - Citrix Online)
GoToMeeting 7.5.1.3911 (HKCU\...\GoToMeeting) (Version: 7.5.1.3911 - CitrixOnline)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Mathematics (HKLM-x32\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office Professional 2013 - en-us (HKLM\...\ProfessionalRetail - en-us) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Research AutoCollage 2008 version 1.1 (HKLM-x32\...\{423D8FBE-EC52-40FD-B2A0-8C9C8F973FD7}) (Version: 1.01.2008 - Microsoft Research)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{2180B33F-3225-423E-BBC1-7798CFD3CD1F}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mikogo (HKCU\...\Mikogo) (Version: 5.2.2 - BeamYourScreen GmbH)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.82 - NVIDIA Corporation)
NVIDIA Graphics Driver 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA nView 146.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 146.33 - NVIDIA Corporation)
NVIDIA WMI 2.22.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.22.0 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
PDF Report Writer (novaPDF 6.4  printer) (HKLM\...\PDF Report Writer_is1) (Version:  - Softland)
PDF to DWG Converter 2015 (HKLM-x32\...\{35A5A640-E86E-42DA-9D6C-691E85CC6DA5}) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7023 - Realtek Semiconductor Corp.)
RoboForm 7-9-16-7 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-16-7 - Siber Systems)
SketchUp Import (2016) (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smilebox (HKCU\...\Smilebox) (Version: 1.0.0.29190 - Smilebox, Inc.)
SugarSync (HKLM-x32\...\SugarSync) (Version: 3.7.0.14.141281 - SugarSync, Inc.)
Toggl Desktop (HKCU\...\TogglDesktop) (Version:  - Toggl)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
 
========================= Devices: ================================
 
Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: LMIInfo
Device ID: ROOT\LEGACY_LMIINFO\0000
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
========================= Memory info: ===================================
 
Percentage of memory in use: 13%
Total physical RAM: 24514.65 MB
Available physical RAM: 21122.8 MB
Total Virtual: 49026.86 MB
Available Virtual: 45116.41 MB
 
========================= Partitions: =====================================
 
1 Drive a: (DATA) (Fixed) (Total:1863.01 GB) (Free:399.22 GB) NTFS
2 Drive c: () (Fixed) (Total:465.76 GB) (Free:235.04 GB) NTFS
4 Drive e: () (Fixed) (Total:298.09 GB) (Free:113.36 GB) NTFS
6 Drive g: (DATA) (Network) (Total:1863.01 GB) (Free:399.22 GB) NTFS
7 Drive q: (DATA) (Network) (Total:1863.01 GB) (Free:399.22 GB) NTFS
8 Drive z: (DATA) (Network) (Total:1863.01 GB) (Free:399.22 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\SERVER
 
Administrator            Guest                    Pro-Star                 
StillmanFamily           Yvonne                   
 
========================= Minidump Files ==================================
 
C:\Windows\Minidump\082015-13213-01.dmp
========================= Restore Points ==================================
 
03-11-2015 19:24:24 Windows Update
10-11-2015 16:17:27 Windows Update
12-11-2015 11:00:18 Windows Update
17-11-2015 09:52:34 Windows Update
20-11-2015 18:42:12 Windows Update
24-11-2015 14:24:27 Windows Update
 
**** End of log ****


#3 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:00 PM

Here are the MBAM results... Note, I renewed my license so I'm now fully protected using the paid version.

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 11/24/2015
Scan Time: 9:42 AM
Logfile: 
Administrator: Yes
 
Version: 2.2.0.1024
Malware Database: v2015.11.24.05
Rootkit Database: v2015.11.23.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Yvonne
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 500457
Time Elapsed: 9 min, 44 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 85
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\adapter, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\abstractbutton, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\abstractbutton\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\alert, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\alert\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\icons, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\generic, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\generic\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\link, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\link\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\images, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\rss, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\rss\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\thirdparty, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\thirdparty\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\uninstall, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\uninstall\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\weather, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\weather\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\foreground, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\radioWrapper, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\background, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\libs, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\_metadata, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
 
Files: 231
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\manifest.json, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\bg.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\buildVars, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\buildVars.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\companionSW.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\config.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\contentScript.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\contentScript.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\debug.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\debug.jade, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\extension_toolbar_api.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\initWidgetWindow.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\newTabContentScript.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\options.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spent.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spent.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spent.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spent2.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spent2.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spentJ.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spentK.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\spentK.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\startup.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\stub.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\stubby.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\superFrame.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\toolbar.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\toolbar.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\toolbarUI.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\toolbarUI.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\toolbarUI.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\url.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\adapter\adapterUtil.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\adapter\widget-adapter.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\abstractbutton\background\abstractButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\alert\background\alertButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\background\embedHtmlWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\html\embedHtmlTemplate.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedhtml\js\embedHtmlUI.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\background\embedScriptWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\html\embedScriptTemplate.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\embedscript\js\embedScriptUI.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\background\FlareWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\icons\Icon_Flare_blue.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\icons\Icon_Flare_pink.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\flare\icons\Thumbs.db, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\generic\background\GenericWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\link\background\linkButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\README.txt, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\background\menuButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\css\menuframe.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\html\menuframe.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\images\right_arrow.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\images\right_arrow_white.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\js\jquery-1.7.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\js\menuframe.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\js\query-string.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\menu\js\underscore-1.3.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\rss\background\RssWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\thirdparty\background\thirdPartyWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\uninstall\background\uninstallButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\components\weather\background\weatherButton.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\bs.30.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\common.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\dynamic.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\enableDetect.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\eventListening.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\global.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\jquery-1.7.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\list-interaction.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\messageEventListener.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\navRedirector.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\paramReplacer.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\PartnerId.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\set.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\underscore-1.3.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\underscore-1.5.2.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\js\unifiedLogging.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widget-context-1.0.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\common.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\eventListening.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\list-interaction.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\set.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\radio-widget.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\css\radio-widget.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\js\radio-custom.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\js\radio-parser.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\radio\js\radio-widget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss\rssWidget.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\rss\js\rss-widget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\invalid.json, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\jquery.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\qunit.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\qunit.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\resource.json, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\resource.xml, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\testWidget.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\test\testWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\widget.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\css\widget.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\js\topapps-config.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\topapps\js\widget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather\weatherButton.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather\css\weatherButton.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\common\widget-api\widgets\weather\js\weather.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\background\ApiBasedWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\background\widget-api-impl.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window\hiddenWidgetWindow.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window\hiddenWidgetWindow.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window\hiddenWidgetWindowInit.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window\widgetWindow.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\api\window\widgetWindow.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\background\updateSearch.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\background\updateSearchPromptBg.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\07_buttons2.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\08_buttons2.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\defaultSearchModal.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\tvf_btn_ok.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\tvf_btn_ok2.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\tvf_restart_icon.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\defaultSearch\foreground\updateSearchPromptFg.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\background\MovieReviewsWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\css\movieReviews.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\html\movieReviews.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\moviereviews\js\movieReviews.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\background\RadioWidget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\css\toolbar-item.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\foreground\button.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\radioWrapper\radioWrapper.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\radio\radioWrapper\radioWrapper.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\background\searchBox.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\html\searchSuggestions.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\html\searchSuggestions.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\html\searchSuggestions.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\search\html\searchSuggestionsInit.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\css\supertab.css, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\html\supertab.html, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\newtabfork.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\reporting.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\srchsugg.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\supertab.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\unifiedLogging.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\components\supertab\js\__utm.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\arrowSprite.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\icon128.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\icon16.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\icon19disabled.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\icon19on.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\icon48.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\icons\tb_icon_search_disappearing_ask.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754507.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754510.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754534.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754535.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754536.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754537.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\223754551.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\down_arrow.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\IDR_PRODUCT_LOGO_16.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\IDR_WEBSTORE_ICON.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\magnifying_glass.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\RadioPlayerSprite.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\search_button.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\tvf_icon_guide.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\tvf_logo.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\images\wrench.png, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\chromeUtils.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\exeManager.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\exeManagerNMD.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\exePackageManager.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\focusManager.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\globalBlacklistManager.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\messaging.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\mutation_summary-min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\mutation_summary.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\nativeMessagingDispatcher.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\newTabInfo.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\newTabInitialize.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\options.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\readLocalStorage.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\reservespacefortoolbar.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\reservespaceifenabled.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\scriptInjector.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\searchContext.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\settingsOverrides.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\toolbarCookieParser.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\toolbarPreinit.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\underscore-1.3.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\URILoaderContentScript.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\Widget.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\widgetContentScriptInjectee.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\widgetFactory.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\js\widgetWindowManager.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\cache.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\ce.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\debug.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\ss.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\libs\jquery-1.7.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\libs\jquery-1.9.1.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\native\libs\underscore-1.5.2.min.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\activePing.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\buttonLogger.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\competitorDnsList.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\console.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\FFPreferencesPersister.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\httpTransport.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\HttpURL.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\internationalSearch.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\LocalStoragePersister.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\MindsparkGlobal.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\MindsparkGlobal.unitTest.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\MindsparkGlobalNotes.txt, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\rsvp-latest.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\searchSuggestLocale.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\testHttpTransport.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\unifiedLogger.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\unifiedLogging.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\universalConsole.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\shared\utils.js, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
PUP.Optional.MindSpark, C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.15.8.46460_0\_metadata\verified_contents.json, , [0cc987fadcaf4ee83de0e9a4a95bd828], 
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)


#4 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:05 PM

Ran TDSSKiller, there were "No threats found"



#5 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:12 PM

Here's the 1st AdwCleaner Log...

 

# AdwCleaner v5.022 - Logfile created 24/11/2015 at 10:06:48
# Updated 22/11/2015 by Xplode
# Database : 2015-11-22.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Yvonne - SERVER
# Running from : C:\Users\Yvonne\Desktop\AdwCleaner.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
Folder Found : C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd
 
***** [ Files ] *****
 
 
***** [ DLL ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
[C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Found : hxxp://vosteran.com/?f=7&a=vst_ir_15_02_ch&cd=2XzuyEtN2Y1L1QzutBtByB0Czz0FtDtDtB0Azz0EtAyB0A0CtN0D0Tzu0StCtCtDtCtN1L2XzutAtFyBtFtCtFtAtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyEzy0F0DtA0FtCtG0EyB0FyBtGyEtB0DyEtGzy0C0ByDtGyCtCyE0AtByByDyByEtAtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDyDtDyD0EtCyBtGzyyCtDzztGyEzztByCtG0AyB0BtDtG0AyE0BzzyEyEtAtBtC0D0Dzy2Q&cr=681838680&ir=
[C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Found : hxxp://binkiland.com/?f=7&a=bnk_mp3_15_07&cd=2XzuyEtN2Y1L1QzutB0CtByB0DyBtC0CyDyDtA0B0E0E0B0AtN0D0Tzu0StCtCyEtCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0EyCzy0FtB0FyEtGzytC0F0FtG0BtC0FyBtG0D0E0EzytGtB0C0FyEyCyEyBtByEtDyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0B0CtByBtAtDyEtGtCtDtAyBtGyEzyzzyEtG0B0Czy0FtGtAtByB0B0DtC0A0DyEtA0FyD2Q&cr=351564195&ir=
[C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : bbmegnmpleoagolcnjnejdacakedpcgd
[C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : bmkckgpgekmanipelfidlhmkfcjicion
 
########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [1935 bytes] ##########


#6 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:17 PM

Here's the log that opened after required rebooting...

 

# AdwCleaner v5.022 - Logfile created 24/11/2015 at 10:12:40
# Updated 22/11/2015 by Xplode
# Database : 2015-11-22.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Yvonne - SERVER
# Running from : C:\Users\Yvonne\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
[-] Folder Deleted : C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd
 
***** [ Files ] *****
 
 
***** [ DLLs ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://vosteran.com/?f=7&a=vst_ir_15_02_ch&cd=2XzuyEtN2Y1L1QzutBtByB0Czz0FtDtDtB0Azz0EtAyB0A0CtN0D0Tzu0StCtCtDtCtN1L2XzutAtFyBtFtCtFtAtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyEzy0F0DtA0FtCtG0EyB0FyBtGyEtB0DyEtGzy0C0ByDtGyCtCyE0AtByByDyByEtAtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDyDtDyD0EtCyBtGzyyCtDzztGyEzztByCtG0AyB0BtDtG0AyE0BzzyEyEtAtBtC0D0Dzy2Q&cr=681838680&ir=
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://binkiland.com/?f=7&a=bnk_mp3_15_07&cd=2XzuyEtN2Y1L1QzutB0CtByB0DyBtC0CyDyDtA0B0E0E0B0AtN0D0Tzu0StCtCyEtCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0EyCzy0FtB0FyEtGzytC0F0FtG0BtC0FyBtG0D0E0EzytGtB0C0FyEyCyEyBtByEtDyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0B0CtByBtAtDyEtGtCtDtAyBtGyEzyzzyEtG0B0Czy0FtGtAtByB0B0DtC0A0DyEtA0FyD2Q&cr=351564195&ir=
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bbmegnmpleoagolcnjnejdacakedpcgd
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bmkckgpgekmanipelfidlhmkfcjicion
 
*************************
 
:: "Tracing" keys removed
:: Winsock settings cleared
 
########## EOF - C:\AdwCleaner\AdwCleaner[C5].txt - [2057 bytes] ##########


#7 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:24 PM

Here's the JRT log...

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.0 (11.12.2015)
Operating System: Windows 7 Professional x64 
Ran by Yvonne (Administrator) on Tue 11/24/2015 at 10:17:57.22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
File System: 4 
 
Successfully deleted: C:\ProgramData\productdata (Folder) 
Successfully deleted: C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_balimbofoedmklhpnchbgmlfipgpbjnl_0.localstorage-journal (File) 
Successfully deleted: C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_balimbofoedmklhpnchbgmlfipgpbjnl_0.localstorage (File) 
Successfully deleted: C:\Users\Yvonne\AppData\Roaming\productdata (Folder) 
 
 
 
Registry: 0 
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 11/24/2015 at 10:19:37.82
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#8 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 01:31 PM

Here's the 2nd AdwCleaner log...

 

# AdwCleaner v5.022 - Logfile created 24/11/2015 at 10:26:52
# Updated 22/11/2015 by Xplode
# Database : 2015-11-22.2 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Yvonne - SERVER
# Running from : C:\Users\Yvonne\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
[-] Folder Deleted : C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd
 
***** [ Files ] *****
 
 
***** [ DLLs ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://vosteran.com/?f=7&a=vst_ir_15_02_ch&cd=2XzuyEtN2Y1L1QzutBtByB0Czz0FtDtDtB0Azz0EtAyB0A0CtN0D0Tzu0StCtCtDtCtN1L2XzutAtFyBtFtCtFtAtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyEyEzy0F0DtA0FtCtG0EyB0FyBtGyEtB0DyEtGzy0C0ByDtGyCtCyE0AtByByDyByEtAtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDyDtDyD0EtCyBtGzyyCtDzztGyEzztByCtG0AyB0BtDtG0AyE0BzzyEyEtAtBtC0D0Dzy2Q&cr=681838680&ir=
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://binkiland.com/?f=7&a=bnk_mp3_15_07&cd=2XzuyEtN2Y1L1QzutB0CtByB0DyBtC0CyDyDtA0B0E0E0B0AtN0D0Tzu0StCtCyEtCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0EyCzy0FtB0FyEtGzytC0F0FtG0BtC0FyBtG0D0E0EzytGtB0C0FyEyCyEyBtByEtDyDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0B0CtByBtAtDyEtGtCtDtAyBtGyEzyzzyEtG0B0Czy0FtGtAtByB0B0DtC0A0DyEtA0FyD2Q&cr=351564195&ir=
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bbmegnmpleoagolcnjnejdacakedpcgd
[-] [C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bmkckgpgekmanipelfidlhmkfcjicion
 
*************************
 
:: "Tracing" keys removed
:: Winsock settings cleared
 
########## EOF - C:\AdwCleaner\AdwCleaner[C6].txt - [2057 bytes] ##########


#9 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 24 November 2015 - 05:09 PM

Here's the ESET Scan Results...

 

E:\Desktop\DATA\RBLA\PowerCAD\zzdownloads\MP3Rocket-Win-pro.exe a variant of Win32/AdInstaller potentially unwanted application deleted - quarantined
E:\Desktop\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL Win32/Toolbar.MyWebSearch.M potentially unwanted application cleaned by deleting - quarantined
E:\Desktop\Program Files\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL Win32/Toolbar.MyWebSearch potentially unwanted application cleaned by deleting - quarantined
E:\Desktop\Program Files\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL Win32/Toolbar.MyWebSearch potentially unwanted application cleaned by deleting - quarantined
E:\External\Maxtor backup\RBLA\C\DATA\RBLA\PowerCAD\zzdownloads\MP3Rocket-Win-pro.exe a variant of Win32/AdInstaller potentially unwanted application deleted - quarantined


#10 nasdaq

nasdaq

  • Malware Response Team
  • 39,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:13 AM

Posted 26 November 2015 - 07:58 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===


Wait for further instructions.

#11 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 30 November 2015 - 12:06 PM

Hello, attached are the files you requested.

Thanks for your help.

Attached Files



#12 nasdaq

nasdaq

  • Malware Response Team
  • 39,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:13 AM

Posted 30 November 2015 - 02:02 PM




Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.


start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-2669524041-3727869485-2838251172-1001\...\Policies\Explorer: []
CHR HKU\S-1-5-21-2669524041-3727869485-2838251172-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @BluebeamPDF/PDF viewer -> C:\Program Files (x86)\Common Files\Bluebeam Software\Revu\Mozilla\npBluebeamMozillaPlugin.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR Extension: (Avast SafePrice) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-02]
CHR Extension: (Avast Online Security) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-02]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-12]
S4 LMIRfsClientNP; no ImagePath
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{00E9545C-5FC9-4020-964E-5EC495188375}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{3A60C7B1-CF8C-41D9-BB75-11B6C4F8A1EC}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{49E0BE0A-39E0-4932-B7BE-F249D56ACD31}\InprocServer32 -> csp16.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{51EC5A86-6575-4895-BEBD-F143B4EAF6FF}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{59EAF653-E763-4D24-85CE-A089AC9A0378}\localserver32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\Roamer.exe => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{61A49923-4691-49AA-8814-A89509AB2729}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{7BDB90E8-7E0D-4D5E-85DB-74B30852204B}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{899FE301-0751-11D5-A066-00B0D011BBC8}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
CustomCLSID: HKU\S-1-5-21-2669524041-3727869485-2838251172-1001_Classes\CLSID\{E6B014B3-7C46-4B16-B6D9-EEAE241104F4}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Simulate 2015\lcodieD.dll => No File
AlternateDataStreams: C:\Users\Yvonne\Desktop\Security and Cleanup Order of Operations.pdf:com.dropbox.attributes

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the LogFile button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleanerCx.txt (x is a number).
===

If the problem persists restore your Windows 7 to the Last good configuration
Follow the instructions on this page.
http://windows.microsoft.com/en-ca/windows/using-last-known-good-configuration#1TC=windows-7

Keep me posted.

#13 nasdaq

nasdaq

  • Malware Response Team
  • 39,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:13 AM

Posted 06 December 2015 - 09:24 AM

Are you still with me?

#14 PowerCAD

PowerCAD
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Incline Village, Nevada
  • Local time:01:13 AM

Posted 06 December 2015 - 08:50 PM

yes, I'm still here.

 

what is the FRST program stand for?

 

Run FRST and click Fix only once and wait.



#15 nasdaq

nasdaq

  • Malware Response Team
  • 39,586 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:13 AM

Posted 07 December 2015 - 09:25 AM

The FRST.exe and/or FRST64.exe you downloaded is located in your Download folder.

C:\Users\Yvonne\Downloads

Please copy the version (file) you have to your Desktop.

Create the Fixlist.txt file as previously suggested and place the file on your Desktop also.

Run the Farbar tool (FRST...) and click the Fix button.

Post the Fixlog.txt file that will be created.

Let me know what problem persists.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users