[SOLVED] HP Print and Scan Doctor will not uninstall

[john19303]

This homebrew computer started life as an XP with an ASUS MoBo. When VISTA came along, upgraded MoBo to ASUS VISTA specific. This MoBo is still in the system. VISTA ran very well, I liked it. Then upgraded to Windows 7. Some time into Win 7, the drive started to hum, an image moved Win 7 to a new 500GB drive. Everything was well. With Win 8 arriving, I decided to dual-boot the Win 7 with Win 8, then updated to Win 8.1 The trouble started with the dual-boot. Not a good mix. Espcially with OneDrive and cross-talk between Win 7 and Win 8. Dumped the 8.1, and now only Win 7. Just removed 1.8 GB of junk files. Still has "HP Print and Scan Doctor" which I cannot remove and it still insists I have the G2010 Scanner connected. There is no Uninstall file and Revo does not find it. SFC /scannow has unresolved errors. On boot, Wi-Fi is the last to start, it should be one of the first. Needs a serious clean-up and fix errors.



DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.17801 BrowserJavaVersion: 11.45.2
Run by John at 15:50:30 on 2015-05-27
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3326.1103 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\VPDAgent.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\atieclxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Earth Networks\WeatherBug\WeatherBug.exe
C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Neat\exec\NeatStartupService.exe
C:\Program Files\Macrium\Reflect\ReflectService.exe
C:\Windows\system32\SecUPDUtilSvc.exe
C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
C:\Program Files\Seagate\Seagate Dashboard 2.0\MobileService.exe
C:\Windows\System32\tcpsvcs.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
uProxyOverride = <local>;*.local
uSearchURL,(Default) = hxxp://search.alot.com/web?q=&pr=auto&client_id=1023E9E001CD40C000FEAB41&src_id=30345&camp_id=3615&tb_version=1.2.0002.2(B)
BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.8.0_45\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre1.8.0_45\bin\jp2ssv.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: &RoboForm Toolbar: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll
TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [SpeedConnectStartUp] <no file>
mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
mRun: [ShadowPlay] c:\windows\system32\rundll32.exe c:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "c:\program files\amd avt\bin\kdbsync.exe" aml
mRun: [CDAServer] c:\program files\common files\common desktop agent\CDASrv.exe
mRun: [DBAgent] "c:\program files\seagate\seagate dashboard 2.0\DBAgent.exe" /WinStart
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
dRun: [Exetender_135] "c:\program files\verizon games player\GPlayer.exe" /runonstartup
dRun: [Norton Download Manager{NF22-B22-4abb-B07C-C084B04B4F12}] c:\program files\norton management\engine\3.2.0.19\ccSvcHst.exe /m
dRunOnce: [SpUninstallDeleteDir] rmdir /s /q "\SearchProtect"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: NoResolveTrack = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-System: SoftwareSASGeneration = dword:1
IE: Customize Menu - C:/Program Files/Siber Systems/AI RoboForm/RoboFormComCustomizeIEMenu.html
IE: Fill Forms - C:/Program Files/Siber Systems/AI RoboForm/RoboFormComFillForms.html
IE: Save Forms - C:/Program Files/Siber Systems/AI RoboForm/RoboFormComSavePass.html
IE: Show RoboForm Toolbar - C:/Program Files/Siber Systems/AI RoboForm/RoboFormComShowToolbar.html
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001071-0002-0071-ABCDEFFEDCBC} - <orphaned>
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\roboform.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\roboform.dll
IE: {6E45F3E8-2683-4824-A6BE-08108022FB36} - {23249465-AA46-4DED-BD4B-8EFB20F968FE} - c:\program files\donottrackplus\ie\DNTPAddon.dll
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{5AF40E26-3484-49FA-920B-E0529D2FDD36} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{61C4A592-4A79-4E5C-8912-22A428156AC3} : DHCPNameServer = 75.75.75.75 75.75.76.76
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\belarcadvisor\system\BAVoilaX.dll
SSODL: WebCheck - <orphaned>
mASetup: Neat ADF Scanner 2008 - reg copy "HKLM\Software\The Neat Company\Neat ADF Scanner 2008" "HKCU\Software\The Neat Company\Neat ADF Scanner 2008" /s /f
mASetup: Send To Neat - reg copy "HKLM\Software\The Neat Company\Send To Neat" "HKCU\Software\The Neat Company\Send To Neat" /s /f
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\43.0.2357.81\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\john\appdata\roaming\mozilla\firefox\profiles\9nuorj5d.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search
FF - prefs.js: browser.search.selectedEngine - Microsoft (Bing)
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search
FF - plugin: c:\progra~1\palmone\packag~1\NPInstal.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.27.5\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre1.8.0_45\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre1.8.0_45\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.40416.0\npctrlui.dll
FF - plugin: c:\program files\siber systems\ai roboform\chrome\plugin\np-rf-plugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_17_0_0_188.dll
.
============= SERVICES / DRIVERS ===============
.
R0 amacpi;Microsoft Away Mode System;c:\windows\system32\drivers\null.sys [2009-7-13 4608]
R0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\drivers\aswNdisFlt.sys [2015-4-26 271248]
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-3-10 49904]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-3-10 209048]
R0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\drivers\pssnap.sys [2015-4-10 16016]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2013-2-1 26096]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-2-1 787760]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-2-1 427992]
R2 Agent;VPDAgent;c:\windows\VPDAgent.exe [2014-12-27 192512]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-6-11 217600]
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ati technologies\ati.ace\fuel\Fuel.Service.exe [2012-6-11 291840]
R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-5-4 24144]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-2-1 74976]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-1-5 106912]
R2 avast! Antivirus;Avast Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2015-4-26 343336]
R2 avast! Firewall;Avast Firewall;c:\program files\avast software\avast\afwServ.exe [2015-4-26 107448]
R2 DiagTrack;Diagnostics Tracking Service;c:\windows\system32\svchost.exe -k utcsvc [2009-7-13 20992]
R2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service;c:\program files\foxit software\foxit reader\foxit cloud\FCUpdateService.exe [2015-2-15 244448]
R2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [2015-1-10 92888]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes anti-malware\mbamscheduler.exe [2015-1-10 1871160]
R2 MBAMService;MBAMService;c:\program files\malwarebytes anti-malware\mbamservice.exe [2015-1-10 1080120]
R2 Neat Startup Service;Neat Startup Service;c:\program files\neat\exec\NeatStartupService.exe [2014-8-6 6144]
R2 ReflectService.exe;Macrium Reflect Image Mounting Service;c:\program files\macrium\reflect\ReflectService.exe [2015-2-23 2589136]
R2 SamsungUPDUtilSvc;Samsung UPD Utility Service;c:\windows\system32\SecUPDUtilSvc.exe [2015-2-15 118576]
R2 Seagate Dashboard Services;Seagate Dashboard Services;c:\program files\seagate\seagate dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [2015-2-13 16216]
R2 Seagate MobileBackup Service;Seagate MobileBackup Service;c:\program files\seagate\seagate dashboard 2.0\MobileService.exe [2015-4-1 157992]
R2 SSPORT;SSPORT;c:\windows\system32\drivers\SSPORT.SYS [2014-5-7 5120]
R2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\avast software\avast\ng\vbox\VBoxAswDrv.sys [2015-4-26 220752]
R3 amdiox86;AMD IO Driver;c:\windows\system32\drivers\amdiox86.sys [2013-3-19 37944]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2012-2-23 86544]
R3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\avast software\avast\ng\vbox\AvastVBoxSVC.exe [2015-4-26 3207800]
R3 BBUpdate;BBUpdate;c:\program files\microsoft\bingbar\7.3.132.0\SeaPort.EXE [2014-3-11 247968]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-1-10 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-1-10 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-1-10 51928]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-6-7 34080]
R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8192cu.sys [2010-8-10 629760]
S2 BBSvc;BingBar Service;c:\program files\microsoft\bingbar\7.3.132.0\BBSvc.EXE [2014-3-11 193696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2014-4-12 103608]
S3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\drivers\aswTap.sys [2013-11-1 38472]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2011-4-11 62464]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2015-5-13 102912]
S3 NvStreamKms;NvStreamKms;c:\program files\nvidia corporation\nvstreamsrv\NvStreamKms.sys [2014-6-7 19232]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-11-10 14848]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2014-10-16 27192]
S3 Samsung UPD Service;Samsung UPD Service;c:\windows\system32\SUPDSvc.exe [2012-1-5 131888]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2013-11-14 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-11-10 27136]
S3 UsbFltr;WayTech USB Filter Driver1;c:\windows\system32\drivers\UsbFltr.sys [2007-4-9 9600]
S3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM106.sys [2009-10-20 1515520]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-3-4 1343400]
S4 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
.
=============== File Associations ===============
.
ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2015-05-27 19:23:47 -------- d--h--w- C:\OneDriveTemp
2015-05-23 23:24:36 62576 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{d236ce47-76c2-4de0-8df2-f486cb39020d}\offreg.4620.dll
2015-05-23 23:11:32 54656 ----a-w- c:\windows\system32\drivers\stream.sys
2015-05-23 23:07:14 9265072 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{d236ce47-76c2-4de0-8df2-f486cb39020d}\mpengine.dll
2015-05-13 08:32:10 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 08:09:46 259072 ----a-w- c:\windows\system32\services.exe
2015-05-11 08:19:36 9201616 ------w- c:\programdata\microsoft\windows defender\definition updates\updates\mpengine.dll
2015-05-02 11:45:14 -------- d-----w- c:\users\john\appdata\local\Skype
2015-05-02 11:40:08 62464 ----a-w- c:\windows\system32\aelupsvc.dll
2015-05-02 11:40:08 5120 ----a-w- c:\windows\system32\shimeng.dll
2015-05-02 11:40:08 295936 ----a-w- c:\windows\system32\apphelp.dll
2015-05-02 11:40:08 20992 ----a-w- c:\windows\system32\sdbinst.exe
2015-05-02 11:40:05 123904 ----a-w- c:\windows\system32\poqexec.exe
2015-05-01 18:10:42 229608 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
.
==================== Find3M ====================
.
2015-05-27 19:25:04 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-26 17:39:42 778416 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-05-26 17:39:42 142512 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-05-05 19:26:28 16384 ----a-w- c:\windows\system32\msdrve.dll
2015-05-05 19:26:28 10816 ----a-w- c:\windows\vmoptver.dll
2015-05-05 01:12:49 248832 ----a-w- c:\windows\system32\schannel.dll
2015-05-02 12:08:38 96352 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-04-27 19:11:55 3934144 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-04-27 19:11:54 3989440 ----a-w- c:\windows\system32\ntkrnlpa.exe
2015-04-27 19:11:53 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2015-04-27 19:11:53 137664 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2015-04-27 19:08:02 1307648 ----a-w- c:\windows\system32\ntdll.dll
2015-04-27 19:05:40 172032 ----a-w- c:\windows\system32\wdigest.dll
2015-04-27 19:05:39 851456 ----a-w- c:\windows\system32\diagtrack.dll
2015-04-27 19:05:35 65536 ----a-w- c:\windows\system32\TSpkg.dll
2015-04-27 19:05:34 635392 ----a-w- c:\windows\system32\tdh.dll
2015-04-27 19:05:33 15872 ----a-w- c:\windows\system32\sspisrv.dll
2015-04-27 19:05:33 100352 ----a-w- c:\windows\system32\sspicli.dll
2015-04-27 19:05:32 43008 ----a-w- c:\windows\system32\srclient.dll
2015-04-27 19:05:32 400896 ----a-w- c:\windows\system32\srcore.dll
2015-04-27 19:05:29 92160 ----a-w- c:\windows\system32\sechost.dll
2015-04-27 19:05:29 22016 ----a-w- c:\windows\system32\secur32.dll
2015-04-27 19:05:17 221184 ----a-w- c:\windows\system32\ncrypt.dll
2015-04-27 19:05:11 259584 ----a-w- c:\windows\system32\msv1_0.dll
2015-04-27 19:04:47 1061376 ----a-w- c:\windows\system32\lsasrv.dll
2015-04-27 19:04:45 550912 ----a-w- c:\windows\system32\kerberos.dll
2015-04-27 19:04:37 38912 ----a-w- c:\windows\system32\csrsrv.dll
2015-04-27 19:04:37 17408 ----a-w- c:\windows\system32\credssp.dll
2015-04-27 19:04:33 641536 ----a-w- c:\windows\system32\advapi32.dll
2015-04-27 19:04:24 40448 ----a-w- c:\windows\system32\typeperf.exe
2015-04-27 19:04:24 364544 ----a-w- c:\windows\system32\tracerpt.exe
2015-04-27 19:04:21 69632 ----a-w- c:\windows\system32\smss.exe
2015-04-27 19:04:14 262656 ----a-w- c:\windows\system32\rstrui.exe
2015-04-27 19:04:12 37888 ----a-w- c:\windows\system32\relog.exe
2015-04-27 19:04:05 22528 ----a-w- c:\windows\system32\lsass.exe
2015-04-27 19:04:04 82944 ----a-w- c:\windows\system32\logman.exe
2015-04-27 19:03:58 17408 ----a-w- c:\windows\system32\diskperf.exe
2015-04-27 19:03:52 50176 ----a-w- c:\windows\system32\auditpol.exe
2015-04-27 19:01:33 60416 ----a-w- c:\windows\system32\msobjs.dll
2015-04-27 19:01:22 146432 ----a-w- c:\windows\system32\msaudite.dll
2015-04-27 18:59:41 6656 ----a-w- c:\windows\system32\apisetschema.dll
2015-04-27 18:59:36 686080 ----a-w- c:\windows\system32\adtschema.dll
2015-04-27 18:00:30 36864 ----a-w- c:\windows\system32\UtcResources.dll
2015-04-26 18:29:11 81728 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-04-26 18:29:11 74976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-04-26 18:29:11 49904 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-04-26 18:29:11 24144 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-04-26 18:29:11 209048 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-04-26 18:29:11 106912 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-04-26 18:29:08 43112 ----a-w- c:\windows\avastSS.scr
2015-04-26 18:28:58 787760 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-04-26 18:28:58 26096 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2015-04-26 18:28:47 271248 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys
2015-04-21 16:25:34 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2015-04-21 16:25:20 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2015-04-21 16:11:10 504320 ----a-w- c:\windows\system32\vbscript.dll
2015-04-21 16:11:07 62464 ----a-w- c:\windows\system32\iesetup.dll
2015-04-21 16:10:12 47616 ----a-w- c:\windows\system32\ieetwproxystub.dll
2015-04-21 16:09:57 341504 ----a-w- c:\windows\system32\html.iec
2015-04-21 16:08:41 64000 ----a-w- c:\windows\system32\MshtmlDac.dll
2015-04-21 15:58:45 115712 ----a-w- c:\windows\system32\ieUnatt.exe
2015-04-21 15:58:44 102912 ----a-w- c:\windows\system32\ieetwcollector.exe
2015-04-21 15:57:57 620032 ----a-w- c:\windows\system32\jscript9diag.dll
2015-04-21 15:51:54 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2015-04-21 15:43:28 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-21 15:31:13 4305920 ----a-w- c:\windows\system32\jscript9.dll
2015-04-21 15:25:45 2052608 ----a-w- c:\windows\system32\inetcpl.cpl
2015-04-21 15:24:48 1155072 ----a-w- c:\windows\system32\mshtmlmedia.dll
2015-04-21 15:02:00 1882112 ----a-w- c:\windows\system32\wininet.dll
2015-04-20 02:56:29 909312 ----a-w- c:\windows\system32\FntCache.dll
2015-04-20 02:56:29 1250816 ----a-w- c:\windows\system32\DWrite.dll
2015-04-20 02:03:22 2382336 ----a-w- c:\windows\system32\win32k.sys
2015-04-18 02:56:57 342016 ----a-w- c:\windows\system32\certcli.dll
2015-04-14 13:37:54 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-14 13:37:44 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-14 13:37:42 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-10 14:20:58 16016 ----a-w- c:\windows\system32\drivers\pssnap.sys
2015-04-08 13:59:32 685872 ----a-w- c:\windows\system32\eed_sl.exe
2015-04-08 13:59:32 29696 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\ssj1mpc.dll
2015-04-08 13:59:32 2318336 ----a-w- c:\windows\system32\eed_ec.dll
2015-04-08 13:59:32 18432 ----a-w- c:\windows\system32\ssj1mlm.dll
2015-04-08 13:59:30 158040 ----a-w- c:\windows\system32\ssj1mci.exe
2015-04-08 03:14:07 22528 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\jnwppr.dll
2015-04-08 03:14:07 216064 ----a-w- c:\windows\system32\InkEd.dll
2015-04-08 03:14:07 19968 ----a-w- c:\windows\system32\jnwmon.dll
2015-03-25 03:00:57 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:00:57 3088384 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:00:57 173056 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:00:27 50176 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00:18 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00:15 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-03-23 03:06:47 576000 ----a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:06:32 630784 ----a-w- c:\windows\system32\invagent.dll
2015-03-23 03:06:26 331264 ----a-w- c:\windows\system32\devinv.dll
2015-03-23 03:06:22 860160 ----a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:06:21 26112 ----a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:06:21 202752 ----a-w- c:\windows\system32\aepdu.dll
2015-03-23 03:06:21 159744 ----a-w- c:\windows\system32\aepic.dll
2015-03-23 02:59:03 896000 ----a-w- c:\windows\system32\aeinv.dll
2015-03-14 03:04:46 67584 ----a-w- c:\windows\system32\dwmapi.dll
.
============= FINISH: 15:52:57.65 ===============









.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/12/2012 10:18:47 AM
System Uptime: 5/27/2015 3:22:48 PM (0 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | M2N-SLI
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ | Socket AM2 | 2600/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 466 GiB total, 411.181 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 0 GiB total, 0.082 GiB free.
G: is Removable
H: is Removable
I: is Removable
J: is Removable
K: is FIXED (NTFS) - 932 GiB total, 134.879 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Null
Device ID: ROOT\LEGACY_NULL\0000
Manufacturer:
Name: Null
PNP Device ID: ROOT\LEGACY_NULL\0000
Service: Null
.
==== System Restore Points ===================
.
RP1252: 5/25/2015 10:31:33 AM - after cleanup
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 17 NPAPI
Adobe Reader XI (11.0.11)
Adobe Refresh Manager
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Fuel
AMD Media Foundation Decoders
AMD VISION Engine Control Center
Apple Application Support (32-bit)
Apple Mobile Device Support
Apple Software Update
ASUSUpdate
Avast Premier
BadgeHelpDownloader
Belarc Advisor 8.4
Bing Bar
Bonjour
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Common Desktop Agent
Cool & Quiet
D3DX10
Do Not Track Me Add-on 2.2.9.515
Dropbox
EasyBCD 2.2
Express Burn Disc Burning Software
Express Zip File Compression Software
Feedback Tool
Foxit Cloud
Foxit Reader
Google Chrome
Google Drive
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
Hewlett-Packard ACLM.NET v1.1.0.0
i-Sound Recorder Pro 7.02
iCloud
IHA_MessageCenter
iTunes
Java 8 Update 45
Java Auto Updater
Junk Mail filter update
Macrium Reflect Home Edition
Malwarebytes Anti-Malware version 2.1.6.1022
Microsoft .NET Framework 4.5.2
Microsoft Application Error Reporting
Microsoft ASP.NET MVC 3
Microsoft ASP.NET MVC 4 Runtime
Microsoft Help Viewer 2.0
Microsoft Mouse and Keyboard Center
Microsoft OneDrive
Microsoft Silverlight
Microsoft SQL Server Compact 3.5 SP2 ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Mozilla Firefox 38.0.1 (x86 en-US)
Mozilla Maintenance Service
Mozilla Thunderbird 31.6.0 (x86 en-US)
MSVCRT
MSVCRT110
MyMailList & AddressBook
Neat
Neat ADF Scanner 2008 Driver
Neat ADF Scanner Driver
Neat Core Files
Neat Mobile Scanner (Silver) Driver
Neat Mobile Scanner 2008 Driver
Neat Mobile Scanner Driver
NeatConnect Scanner Driver
NVIDIA Drivers
NVIDIA GeForce Experience 2.1
NVIDIA Install Application
NVIDIA LED Visualizer 1.0
NVIDIA Network Service
NVIDIA PhysX
NVIDIA PhysX System Software 9.13.1220
NVIDIA ShadowPlay 14.6.22
NVIDIA Virtual Audio 1.2.23
OGA Notifier 2.0.0048.0
OpenOffice 4.1.0
Opera Stable 29.0.1795.60
Palm Desktop by ACCESS
Photo Common
Photo Notifier and Animation Creator
PVSonyDll
QuickTime 7
REALTEK Wireless LAN Driver and Utility
Revo Uninstaller Pro 3.1.2
RoboForm 7-9-13-5 (All Users)
Samsung Easy Printer Manager
Samsung ML-2160 Series
Samsung Printer Live Update
Samsung Universal Print Driver 2
Seagate Dashboard
Security Update for Microsoft .NET Framework 4.5.2 (KB3023224)
Security Update for Microsoft .NET Framework 4.5.2 (KB3035490)
Security Update for Microsoft .NET Framework 4.5.2 (KB3037581)
Send To Neat
SHIELD Streaming
SpeedConnect Internet Accelerator v.8.0
SpywareBlaster 5.0
Tri Peaks 2 Quest For The Ruby Ring
USB Multi-Channel Audio Device
WeatherBug®
Windows Driver Package - Intel Net (08/20/2008 8.10.3.0)
Windows Installer Clean Up
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live MIME IFilter
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
.
==== Event Viewer Messages From Past Week ========
.
5/27/2015 3:24:40 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
5/27/2015 3:23:52 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Null
5/25/2015 6:13:19 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Seagate Dashboard Services service to connect.
.
==== End Of File ===========================

 

[Corrine]

Hi, John.

That computer has had some history!

Let's start with some basic cleanup and then we'll decide if a different direction is needed.

1. Please download AdwCleaner by Xplode and save to your Desktop.

• Double-click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• The tool will start to update the database, please wait a bit.
• Click on the Scan button.
• AdwCleaner will begin. Please be patient as the scan may take some time to complete.
• After the scan has finished, click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

2. Please download Junkware Removal Tool to your desktop.

• Disable your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

3. Please follow these instructions carefully. Download ComboFix from the following location: Link 1

!!! IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your antivirus and anti-malware security applications. If not disabled, these programs will likely interfere with cleanup process. This can usually be accomplished by a right-click on the icon in the System Tray.
  
  Note: If you are unsure how to disable your security software, see the instructions in this topic at Tech Support Forum: How to disable your security applications.
  
• If infections are found, ComboFix will automatically reboot the machine to complete the removal process. Please ensure all opened windows are closed before proceeding.
• Double-click ComboFix.exe on your desktop and follow the prompts.
• Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
• When finished, a log will be produced. Please copy C:\ComboFix.txt in your next reply.

 

[john19303]

Adwcleaner will not allow me to download their program. See screenshot. Shall I follow up on this program :huh:?

 

[Corrine]

Hi, John.

It appears you may have clicked on the ad instead of the download link. Let's go directly to the developer's site: Downloads - AdwCleaner - ToolsLib. If that doesn't work, move on to the second tool, which is a direct download link.

 

[john19303]

Hi, John.

It appears you may have clicked on the ad instead of the download link. Let's go directly to the developer's site: Downloads - AdwCleaner - ToolsLib. If that doesn't work, move on to the second tool, which is a direct download link.

 

[john19303]

The scans are done. sfc /scannow still has corrupted files.

I did not want to post the three log files because of their combined size. Adaware = 16KB, JRT = 132KB, Combofix = 43KB, for a total of nearly 200KB :).

Please advise. ~ John

 

[Corrine]

Hi, John. Without the logs, I cannot see what has been done. If necessary, post in separate replies.

 

[john19303]

OK, it's in two posts.




# AdwCleaner v4.205 - Logfile created 29/05/2015 at 03:55:13
# Updated 21/05/2015 by Xplode
# Database : 2015-05-25.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x86)
# Username : John - JOHN-PC
# Running from : C:\Users\John\Desktop\adwcleaner_4.205.exe
# Option : Cleaning
***** [ Services ] *****

***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\blekko toolbars
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\SecTaskMan
Folder Deleted : C:\ProgramData\Uniblue
Folder Deleted : C:\ProgramData\KingSoft
[x] Not Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeatherBug®
Folder Deleted : C:\Program Files\verizontb
Folder Deleted : C:\Program Files\Earth Networks
Folder Deleted : C:\Program Files\KingSoft
Folder Deleted : C:\Windows\system32\SearchProtect
Folder Deleted : C:\Users\John\AppData\Local\Conduit
Folder Deleted : C:\Users\John\AppData\Local\KingSoft
Folder Deleted : C:\Users\John\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\John\AppData\LocalLow\verizontb
Folder Deleted : C:\Users\John\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\John\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\John\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\John\AppData\Roaming\quickclick
Folder Deleted : C:\Users\John\AppData\Roaming\SearchProtect
Folder Deleted : C:\Users\John\AppData\Roaming\download Manager
Folder Deleted : C:\Users\John\AppData\Roaming\KingSoft
Folder Deleted : C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
File Deleted : C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fcfenmboojpjinhpgggodefccipikbpd_0.localstorage
File Deleted : C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\WeatherBug®.lnk
[x] Not Deleted : C:\Users\John\Desktop\WeatherBug®.lnk
File Deleted : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\invalidprefs.js
File Deleted : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\searchplugins\bingp.xml
File Deleted : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\searchplugins\safesearch.xml
File Deleted : C:\Program Files\Mozilla Firefox\defaults\pref\itms.js
***** [ Scheduled tasks ] *****
Task Deleted : ErrorEND
Task Deleted : IHUninstallTrackingTASK
***** [ Shortcuts ] *****

***** [ Registry ] *****
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\AppDataLow\Software\iWon
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\ImInstaller
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>;*.local
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17801

-\\ Mozilla Firefox v38.0.1 (x86 en-US)
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2154407.smartbar.CTID", "CT2154407");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2154407.smartbar.Uninstall", "0");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2154407.smartbar.toolbarName", "BadgeHelp ");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=ToolbarsInfo&ctids=CT2724407,CT2724431,CT2727162,CT2727622,CT2727646,CT2727678,CT2727750[...]
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.InstallationId", "ConduitStubGeneric");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.InstallationType", "ConduitStubIntegration");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.SearchCaption", "IncrediMail MediaBar 2 Customized Web Search");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2724386&SearchSource=13");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2724386");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CT2724386.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\John\\AppData\\R...rj5d.default\\conduitCommon\\modules\\3.8.1.0");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_8ba608e0", "356x332");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://mystart.incredimail.com/mb94/?loc=ff_address_bar&a=DidwKZhl0J&search=");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2724386");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2724386");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2724386");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Nov 07 2011 09:36:06 GMT-0500 (Eastern Standard Time)");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.globalUserId", "9823b5c2-d35a-4c30-ab3d-ddd23a51b6c7");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Jan 26 2012 13:33:12 GMT-0500 (Eastern Standard Time)");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Jan 26 2012 13:33:13 GMT-0500 (Eastern Standard Time)");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jan 26 2012 13:33:04 GMT-0500 (Eastern Standard Time)");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userId", "6a0d3512-6f68-4289-9096-c28924a724b4");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://co103w.col103.mail.live.com/default.aspx?wa=wsignin1.0");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "MyStart Search");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=0490F5D2-455A-4F70-B66B-A46FFBBA108E&n=77df4aeb&ptnrS=CDxdm003BRus&si=CJnt9dyj-6wCFcbd4AodYy[...]
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.initialized", true);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.installDate", "2011122411");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerId", "CDxdm003BRus");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerSubId", "CJnt9dyj-6wCFcbd4AodYyp-Tg");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.success", true);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.toolbarId", "0490F5D2-455A-4F70-B66B-A46FFBBA108E");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.lastActivePing", "1327602782885");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.defaultSearch", false);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.homePageEnabled", false);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.keywordEnabled", false);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.tabEnabled", false);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.weather.location", "21740");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "couponalert@mindspark.com");
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 0);
[9nuorj5d.default\prefs.js] - Line Deleted : user_pref("smartbar.machineId", "CH8XTJPAYIWQWVBIUJSRMCTAGX6WAND1SEY4CP9UEO7PFJOLGUEAUWDDQACVIMWYLP8UYT8PY9OKFVUPEG/OSQ");
-\\ Google Chrome v43.0.2357.81
[C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : fcfenmboojpjinhpgggodefccipikbpd
-\\ Opera v29.0.1795.60

*************************
AdwCleaner[R0].txt - [14579 bytes] - [29/05/2015 03:47:20]
AdwCleaner[S0].txt - [15362 bytes] - [29/05/2015 03:55:13]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15422 bytes] ##########



ComboFix 15-05-28.01 - John 05/29/2015 4:40.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3326.1789 [GMT -4:00]
Running from: c:\users\John\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
K:\Autorun.inf
K:\install.exe
.
.
((((((((((((((((((((((((( Files Created from 2015-04-28 to 2015-05-29 )))))))))))))))))))))))))))))))
.
.
2015-05-29 08:55 . 2015-05-29 09:00 -------- d-----w- c:\users\John\AppData\Local\temp
2015-05-29 08:55 . 2015-05-29 08:55 -------- d-----w- c:\users\UpdatusUser.John-PC\AppData\Local\temp
2015-05-29 08:55 . 2015-05-29 08:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-05-29 08:23 . 2015-05-29 08:23 -------- d-----w- C:\RegBackup
2015-05-29 08:20 . 2015-05-29 08:20 -------- d-----w- C:\OneDriveTemp
2015-05-29 07:45 . 2015-05-29 07:55 -------- d-----w- C:\AdwCleaner
2015-05-23 23:24 . 2015-05-23 23:24 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D236CE47-76C2-4DE0-8DF2-F486CB39020D}\offreg.4620.dll
2015-05-23 23:11 . 2015-04-11 03:07 54656 ----a-w- c:\windows\system32\drivers\stream.sys
2015-05-23 23:07 . 2015-05-03 03:42 9265072 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D236CE47-76C2-4DE0-8DF2-F486CB39020D}\mpengine.dll
2015-05-13 08:32 . 2015-05-01 13:16 102608 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 08:09 . 2015-04-13 03:19 259072 ----a-w- c:\windows\system32\services.exe
2015-05-02 12:10 . 2015-05-02 12:10 -------- d-----w- c:\program files\Common Files\Java
2015-05-02 11:45 . 2015-05-02 11:45 -------- d-----w- c:\users\John\AppData\Local\Skype
2015-05-02 11:45 . 2015-05-05 19:34 -------- d-----w- c:\users\John\AppData\Roaming\Skype
2015-05-02 11:44 . 2015-05-05 19:34 -------- d-----w- c:\programdata\Skype
2015-05-02 11:40 . 2015-03-04 04:11 5120 ----a-w- c:\windows\system32\shimeng.dll
2015-05-02 11:40 . 2015-03-04 04:10 295936 ----a-w- c:\windows\system32\apphelp.dll
2015-05-02 11:40 . 2015-03-04 04:10 62464 ----a-w- c:\windows\system32\aelupsvc.dll
2015-05-02 11:40 . 2015-03-04 04:10 20992 ----a-w- c:\windows\system32\sdbinst.exe
2015-05-02 11:40 . 2015-02-18 07:06 123904 ----a-w- c:\windows\system32\poqexec.exe
2015-05-01 18:10 . 2015-05-01 18:10 229608 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-29 08:03 . 2015-01-10 23:58 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-26 17:39 . 2012-04-05 06:59 778416 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-05-26 17:39 . 2011-05-19 12:02 142512 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-05-05 19:26 . 2010-02-13 14:33 16384 ----a-w- c:\windows\system32\msdrve.dll
2015-05-05 19:26 . 2010-02-13 14:33 10816 ----a-w- c:\windows\vmoptver.dll
2015-05-02 12:08 . 2014-10-15 12:54 96352 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-04-26 18:29 . 2014-05-04 06:56 24144 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-04-26 18:29 . 2014-01-05 10:04 106912 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-04-26 18:29 . 2013-03-10 08:42 209048 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-04-26 18:29 . 2013-03-10 08:42 49904 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-04-26 18:29 . 2013-02-02 00:24 427992 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-04-26 18:29 . 2013-02-02 00:24 81728 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-04-26 18:29 . 2013-02-02 00:24 74976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-04-26 18:29 . 2015-04-26 18:29 291312 ----a-w- c:\windows\system32\aswBoot.exe
2015-04-26 18:29 . 2015-04-26 18:29 43112 ----a-w- c:\windows\avastSS.scr
2015-04-26 18:28 . 2013-02-02 00:24 787760 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-04-26 18:28 . 2013-02-02 00:24 26096 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2015-04-26 18:28 . 2015-04-26 18:28 271248 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys
2015-04-14 13:37 . 2015-01-10 23:58 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-14 13:37 . 2015-01-10 23:58 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-14 13:37 . 2015-01-10 23:58 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-10 14:20 . 2015-04-10 14:25 16016 ----a-w- c:\windows\system32\drivers\pssnap.sys
2015-04-08 13:59 . 2015-04-08 13:59 685872 ----a-w- c:\windows\system32\eed_sl.exe
2015-04-08 13:59 . 2015-04-08 13:59 2318336 ----a-w- c:\windows\system32\eed_ec.dll
2015-04-08 13:59 . 2015-04-08 13:59 18432 ----a-w- c:\windows\system32\ssj1mlm.dll
2015-04-08 13:59 . 2013-09-13 14:40 29696 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\ssj1mpc.dll
2015-04-08 13:59 . 2015-04-08 13:59 158040 ----a-w- c:\windows\system32\ssj1mci.exe
2015-03-25 03:00 . 2015-04-12 14:17 3088384 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:00 . 2015-04-12 14:17 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:00 . 2015-04-12 14:17 566784 ----a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:00 . 2015-04-12 14:17 35328 ----a-w- c:\windows\system32\wups2.dll
2015-03-25 03:00 . 2015-04-12 14:17 29696 ----a-w- c:\windows\system32\wups.dll
2015-03-25 03:00 . 2015-04-12 14:17 2020864 ----a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:00 . 2015-04-12 14:17 173056 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:00 . 2015-04-12 14:17 50176 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00 . 2015-04-12 14:17 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00 . 2015-04-12 14:17 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:00 . 2015-04-12 14:17 131584 ----a-w- c:\windows\system32\wuauclt.exe
2015-03-23 03:06 . 2015-04-12 14:17 576000 ----a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:06 . 2015-04-12 14:17 630784 ----a-w- c:\windows\system32\invagent.dll
2015-03-23 03:06 . 2015-04-12 14:17 331264 ----a-w- c:\windows\system32\devinv.dll
2015-03-23 03:06 . 2015-04-12 14:17 860160 ----a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:06 . 2015-04-12 14:17 26112 ----a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:06 . 2015-04-12 14:17 159744 ----a-w- c:\windows\system32\aepic.dll
2015-03-23 03:06 . 2015-04-12 14:17 202752 ----a-w- c:\windows\system32\aepdu.dll
2015-03-23 02:59 . 2015-04-12 14:17 896000 ----a-w- c:\windows\system32\aeinv.dll
2015-03-14 03:04 . 2015-04-25 15:34 1372160 ----a-w- c:\windows\system32\dwmcore.dll
2015-03-14 03:04 . 2015-04-25 15:34 67584 ----a-w- c:\windows\system32\dwmapi.dll
2015-03-10 03:08 . 2015-04-15 23:04 1237504 ----a-w- c:\windows\system32\msxml3.dll
2015-03-10 03:05 . 2015-04-15 23:04 2048 ----a-w- c:\windows\system32\msxml3r.dll
2015-03-05 04:06 . 2015-04-15 23:04 305152 ----a-w- c:\windows\system32\gdi32.dll
2015-03-04 04:16 . 2015-04-15 23:05 249784 ----a-w- c:\windows\system32\clfs.sys
2015-03-04 04:10 . 2015-04-15 23:05 58880 ----a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:10 . 2015-05-02 11:40 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-02 11:40 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-02 11:40 2560 ----a-w- c:\windows\apppatch\AcRes.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2015-05-23 22:55 1605832 ----a-w- c:\users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2015-05-23 22:55 1605832 ----a-w- c:\users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2015-05-23 22:55 1605832 ----a-w- c:\users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08 131480 ----a-w- c:\users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-04-26 18:29 645144 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2015-04-28 15:33 576840 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Uploader"="c:\program files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe" [2015-04-01 127304]
"OneDrive"="c:\users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe" [2015-05-23 382664]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2015-05-02 110160]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-05-13 5515496]
"ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-05-29 1122312]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-04-07 157480]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2014-10-02 421888]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-06-11 641704]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2014-09-08 351968]
"DBAgent"="c:\program files\Seagate\Seagate Dashboard 2.0\DBAgent.exe" [2015-04-01 1533728]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2015-04-30 334896]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallDeleteDir"="rmdir" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"LegacyDrive"= 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
"NoResolveTrack"= 1 (0x1)
.
[HKLM\~\startupfolder\C:^Users^John^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HotSync Manager.lnk]
backup=c:\windows\pss\HotSync Manager.lnk.Startup
backupExtension=.Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PicoZip
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AvastUI.exe]
2015-05-13 08:13 5515496 ----a-w- c:\program files\AVAST Software\Avast\avastui.exe
.
R0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2015-04-26 106912]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys [2013-11-01 38472]
R3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.3.132.0\SeaPort.exe [2014-03-12 247968]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2012-11-02 64664]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-04-21 102912]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-05-29 119512]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]
R3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-05-29 19232]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe [2012-01-05 131888]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
R3 UsbFltr;WayTech USB Filter Driver1;c:\windows\system32\Drivers\UsbFltr.sys [2007-04-09 9600]
R3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM106.sys [2009-10-20 1515520]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-03-14 104752]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-02-12 1343400]
R4 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-04-14 1871160]
S0 amacpi;Microsoft Away Mode System;c:\windows\system32\DRIVERS\null.sys [2009-07-13 4608]
S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2015-04-26 271248]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\DRIVERS\pssnap.sys [2015-04-10 16016]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2015-04-26 26096]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2015-04-26 787760]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2015-04-26 427992]
S2 Agent;VPDAgent;c:\windows\VPDAgent.exe [2013-11-14 192512]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-06-11 217600]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-06-11 291840]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2015-04-26 24144]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2015-04-26 74976]
S2 avast! Firewall;Avast Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2015-04-26 107448]
S2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.3.132.0\BBSvc.exe [2014-03-12 193696]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service;c:\program files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [2014-10-28 244448]
S2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [2015-04-14 92888]
S2 Neat Startup Service;Neat Startup Service;c:\program files\Neat\exec\NeatStartupService.exe [2014-08-06 6144]
S2 ReflectService.exe;Macrium Reflect Image Mounting Service;c:\program files\Macrium\Reflect\ReflectService.exe [2015-02-23 2589136]
S2 SamsungUPDUtilSvc;Samsung UPD Utility Service;c:\windows\system32\SecUPDUtilSvc.exe [2014-11-26 118576]
S2 Seagate Dashboard Services;Seagate Dashboard Services;c:\program files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [2015-02-13 16216]
S2 Seagate MobileBackup Service;Seagate MobileBackup Service;c:\program files\Seagate\Seagate Dashboard 2.0\MobileService.exe [2015-04-01 157992]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2014-05-07 5120]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-26 220752]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2012-02-23 86544]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-26 3207800]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080]
S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys [2010-08-10 629760]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - BHDrvx86
*Deregistered* - EraserUtilRebootDrv
*Deregistered* - IDSVix86
*Deregistered* - NAVENG
*Deregistered* - NAVEX15
*Deregistered* - SRTSP
*Deregistered* - SRTSPX
*Deregistered* - SymDS
*Deregistered* - SymEFA
*Deregistered* - SymEvent
*Deregistered* - SymIRON
*Deregistered* - SymNetS
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
iissvcs REG_MULTI_SZ w3svc was
apphost REG_MULTI_SZ apphostsvc
utcsvc REG_MULTI_SZ DiagTrack
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-05-25 20:22 986440 ----a-w- c:\program files\Google\Chrome\Application\43.0.2357.81\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-05-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 17:39]
.
2015-05-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 12:58]
.
2015-05-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 12:58]
.
2015-05-28 c:\windows\Tasks\Macrium-Backup-{B9AE9F03-994A-48EF-997A-0698FF24685D}.job
- c:\program files\Macrium\Reflect\reflect.exe [2015-04-10 14:11]
.
2015-05-05 c:\windows\Tasks\Macrium-Backup-{F7F770EC-DF76-480A-BDE9-56B4697FE2F8}.job
- c:\program files\Macrium\Reflect\reflect.exe [2015-04-10 14:11]
.
.
------- Supplementary Scan -------
.
uSearchURL,(Default) = hxxp://search.alot.com/web?q=&pr=auto&client_id=1023E9E001CD40C000FEAB41&src_id=30345&camp_id=3615&tb_version=1.2.0002.2(B)
IE: Customize Menu - file://C:/Program Files/Siber Systems/AI RoboForm/RoboFormComCustomizeIEMenu.html
IE: Fill Forms - file://C:/Program Files/Siber Systems/AI RoboForm/RoboFormComFillForms.html
IE: Save Forms - file://C:/Program Files/Siber Systems/AI RoboForm/RoboFormComSavePass.html
IE: Show RoboForm Toolbar - file://C:/Program Files/Siber Systems/AI RoboForm/RoboFormComShowToolbar.html
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
FF - ProfilePath - c:\users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search
FF - prefs.js: browser.search.selectedEngine - Microsoft (Bing)
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-SpeedConnectStartUp - (no file)
HKU-Default-Run-Exetender_135 - c:\program files\Verizon Games Player\GPlayer.exe
HKU-Default-Run-Norton Download Manager{NF22-B22-4abb-B07C-C084B04B4F12} - c:\program files\Norton Management\Engine\3.2.0.19\ccSvcHst.exe
HKLM_ActiveSetup-Neat ADF Scanner 2008 - reg copy HKLM\Software\The Neat Company\Neat ADF Scanner 2008 HKCU\Software\The Neat Company\Neat ADF Scanner 2008
HKLM_ActiveSetup-Send To Neat - reg copy HKLM\Software\The Neat Company\Send To Neat HKCU\Software\The Neat Company\Send To Neat
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2516008890-62740797-1088872154-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (S-1-5-21-2516008890-62740797-1088872154-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2516008890-62740797-1088872154-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-2516008890-62740797-1088872154-1001)
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Environment*]
"v5Licence0"="15-B673-Q7FK-AFMA-7XT5-HMX5-7P6M5C9"
"Activated"="Y"
"v5Licence"="36-8E7N-CEZJ-CXRG-R7Y8-4ZF2-YHNXVYS"
.
[HKEY_LOCAL_MACHINE\software\Wondershare\Wondershare Helper Compact\1347241300\=c:\users\John\AppData\Local\Temp*TMP=c:\users\John\AppData\Local\Temp*USERDOMAIN=John-PC*USERNAME=John*USERPROFILE=c:\users\John*windir=c:\windows*windows_tracing_flags=3*windows_tracing_logfile=c:\BVTBin\Tests\installpackage\csilogfile.log*__COMPAT_LAYER]
"JoinUserExperience"=dword:00000001
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(5484)
c:\windows\System32\SyncCenter.dll
c:\windows\system32\FXSRESM.DLL
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Microsoft Mouse and Keyboard Center\itype.exe
c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\System32\tcpsvcs.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\System32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\windows\system32\sppsvc.exe
c:\windows\system32\DllHost.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
.
**************************************************************************
.
Completion time: 2015-05-29 05:06:23 - machine was rebooted
ComboFix-quarantined-files.txt 2015-05-29 09:06
.
Pre-Run: 440,281,751,552 bytes free
Post-Run: 440,343,261,184 bytes free
.
- - End Of File - - 39CD40C4A992BDB573672C8202BBF2E6
A36C5E4F47E84449FF07ED3517B43A31

 

[john19303]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.8.3 (05.28.2015:2)
OS: Windows 7 Professional x86
Ran by John on Fri 05/29/2015 at 4:23:40.51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Tasks

~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\weatherbug

~~~ Registry Keys

~~~ Files

~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{008551AC-493D-4A93-AB7F-2FD35E4F9BD3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{008771DE-AA87-4B23-8584-179E9E5B61ED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{00B10268-5AB5-4731-9618-A423011A4633}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{00C04696-3854-4A64-8CFC-1B525350232F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{00CF2862-6E42-496D-9E36-A85E60648686}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{014626C9-D4AB-48F6-9C0C-D8B3FD2E084A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{01989537-CC8A-479F-819F-567B41CE5D71}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{01D1F065-B193-473F-80E0-F9A645823116}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{01D45316-98E9-4C25-9BE5-09C9C7C0D433}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{01EBB11A-94D4-4763-BE55-B77174919AC3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{020B4859-CE99-4879-8451-2BFACABC1007}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{02232D08-83EE-42B0-9DDC-137E555065ED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0226B081-D50E-4EE9-A16F-F3079BA1629C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{022E6C11-CE57-420C-A7C6-E21D9C66A3F9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0288D1B4-601C-4D53-9A93-E75C1E833FD1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0374193C-CC38-435A-809F-13A8DB8D8707}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{04F015AB-45EB-4413-B2E8-803718B04773}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0503DBC3-C3DD-4A0E-849C-CA99467F33DD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{059763CC-C7BF-4EB9-BA39-D804A10918B4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{05CC0932-73A1-4D01-9167-1BF6ABF4F2C3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{05F1DFE4-5895-4B27-9FEB-3921FD17CA2B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{061B1D4F-9FBB-4BD4-9F1E-0EB623E7FD00}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{065A9A9A-6701-49B0-A394-6DAAB9FCAF18}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0689D721-C927-43FA-B0F4-A76F49C0097B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0697C90D-5EE4-494A-B344-4D3B89F056E3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{06C023DD-229D-4A68-AC9B-57C81016D089}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{06DF5785-AE8E-43AD-BF79-CD3E86E24BE3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0767F838-1902-4210-BC66-BE202AA4FE80}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0771DBED-951A-405F-ADE6-34D1EEBB4BEC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{082C4A26-B983-4017-AF8B-B304F47F9261}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{084AA619-F9FC-4930-8B3C-D2A8FCD1BF40}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0880CD84-DB09-4369-8D50-EA58B7F55585}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{08907DBE-6128-4296-BAC0-0BA0788FB2EB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{08A36269-EF2B-4306-BC44-47204629C6BA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{08CB204C-C03C-4389-B3D8-7A4EA39F7CC0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{08EDB62D-3411-437F-B481-CED4DE7286F4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{09213504-DCEB-4C55-B487-94F46803D762}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{09439929-3962-44B2-AE8C-38ACB2641D2E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0988FA15-2586-4CC1-917D-A4DD417F073A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0AC05C1F-A302-4AC1-A16C-A2A616F56E41}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0ADB8876-F927-4B5C-B708-A12E31BB8339}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0AF37C3F-B468-4422-912E-847968A912E6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0B1E55D3-DB0B-462C-B67D-9DB029F679B1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0B5C5B08-A7D0-4867-8EF4-CA258CC079BC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0B95169C-6B73-46DC-97CA-EEC67D8DEB7F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0BA7476F-5BBB-4878-93B7-3E8D6092084D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0BB0CD2B-BD2E-4500-8B69-D7C0B750184F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0C0CA4EC-B370-45B3-A906-604D76974AF0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0C55B67E-1A82-4082-B098-A136D9653878}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0C864B3A-6629-48F5-B3BD-3B1D3A678385}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0CC5C1CD-C29A-4BBE-A506-543D40773E3B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0D40C916-C9BA-427B-9F55-51EBE2B356FE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0D5873D4-6BE8-48BF-B117-4F2FE3E17BDD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0DDBD04D-2B57-4AEF-9F4F-2BEC30749FFB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0E139AD7-9E22-490E-B97E-64110A3DE921}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0E1682FE-793F-4988-B809-BFFB5BFC1FED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0E6D6FF3-0D63-47ED-8A33-F2C730C82EDD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0E76B2BB-3835-4D6B-8CD7-6728F40EB36B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0ED58A74-70DB-4739-A6E3-0E257923752F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{0FE3599E-66FF-4261-B68F-EECF7EE86F34}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{10B026A0-AFED-46F7-BAC8-598F378EAB0F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1166DB73-1D7A-4E31-ACC2-FFF74B3311F2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{11716D70-6E68-4C48-9774-AB8669CB861D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{11A4C440-9812-419F-BE74-FD7AB8B63FCD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{11D7BC13-5706-4119-83BE-A1413C2BA8A6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{11F5CDC6-EF2B-410E-8C8D-984B6BFEC054}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{12555CD5-7DBE-4057-BA2C-A9BEE11290D5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1279375E-6AB6-4E7D-9878-2D818E388A55}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{128946F0-F39E-4AA7-B9D7-0E4B9019D53F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1341B397-6FC6-40C2-9BAA-9AA796009FB9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{136B1388-8A5C-4DA7-92A2-CAED53EFDC78}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{13AE96CB-A6A4-4330-BDEA-A527EA9C84CD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{14221681-E3C8-43E3-A0F8-578875C57D9E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{14813965-6A67-4376-AAE0-4019C7CACE34}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{153FA2D6-2789-4E04-9955-288209C25FEC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1631F812-45CB-4342-97F1-1DDBAC91B504}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{164D731F-F91D-45BE-BD1A-442E6B69202E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1677F448-DDF8-4D08-AB3F-067E3E490D77}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{168398B3-CE19-46F4-8C29-CFA46B0C067F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{16ACE140-2F2A-4899-9698-C5DD00901B32}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{16FE68AA-5750-4D29-974B-A18F19B9C53A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1800D558-9183-4898-A9AA-24524887DC21}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{18416069-7A03-4B03-88D0-3024CED5AF97}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{185BA6D3-0F6A-48B2-9A8A-373AA0BF89B3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{188FB6CF-DF4A-4A83-BFAF-FDDE43BA4859}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{189D3921-40F9-4CA6-A320-A559D3F68CD1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1903B633-C8F7-4ADD-B6F1-5D7B7DFC6B61}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{19B6D36D-16DA-4CB5-81D1-FE1539940588}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{19CB7451-3E74-4907-B24F-5D878E45A5EA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1ADAFDC0-56A0-41E4-9669-BD58FCDEC700}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1B6C071A-941D-4039-AC20-CB61972A7330}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1B8AB8C7-E8FD-4B50-860A-9B443C77013D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1BAD8C9D-EE7A-4336-848E-8C4FEDEDF333}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1BB04164-FB2C-4290-A5C3-9D0F60414618}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1BE8D160-312C-42DC-901C-A8C1ECC8B6EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1C0CD831-D46C-46B8-8679-4429CE8AF84F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1C36216E-2DA7-46B8-89BF-E628A1F45A30}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1D157AF1-8810-43C7-B1BD-DDF210FAA6B9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1ED63CCF-ECD5-4439-A853-36E27DDA4AC6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1EEE6D53-8931-4437-B86F-F4E6702E7EB9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1EFF60BD-60A7-4E7B-A8CB-993D00BCF632}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1F1918D3-093D-47B1-8482-984E579B0415}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1F68B85B-04A7-41B6-BDBF-AB2546D5FAE4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1F6A8B0A-C8C6-41B6-A6D4-FACF584E0F66}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1F780799-0CB7-4947-84C5-6BDED29867C5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1FD59411-94F7-404F-827F-0EBB67D455C2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{1FFDD1AC-460D-4009-9E42-B3B86509C322}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2086FA29-1A82-44E6-ADE7-14C299BF7502}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{20C3A09C-B5BD-4D4A-AEAD-1BED2A649D30}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{20E4F586-E3C8-4480-AE10-A66BFD3B104A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2115C65C-D0E6-425F-8705-53C333F87A18}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2146B875-74B4-413D-B843-9352BE964679}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2177E024-0B46-43DE-B879-85C1724CDB41}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{219754B3-9CD2-4ED1-8EB6-F4BF3E48DBB8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{21E29BAF-DEA6-4A2A-B957-473E054E593A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{226D5F2A-8BD9-44E4-951D-B362D206772F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2295CD32-CDA0-4496-AB99-4321E8D3F53F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{229A2CC7-6FF4-437B-8688-C327B94781AB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{22DFCCDF-3777-4F0D-9109-D75CD8C3EF68}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{239060F0-CADB-4B99-9213-6E1AA7FAFC82}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{23C78CC9-37B7-4B25-9A2E-59D9BE26FE70}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2464A26A-B1C9-4132-A3D9-5D6F2F098C02}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{24A8525B-58DC-4E4F-9E16-5B193B659801}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{24CB9714-2357-45AC-85A7-23339E1730FB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2550DC22-1C4F-423F-AA60-A38C33FA45CE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{25A47FB6-A5A2-4756-8017-ECCD29983923}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{25B4702E-03AB-4B46-9B22-6C74F3FFE081}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2630A8B0-AF29-47AA-B92E-9D16BC2D042D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{271AB87A-332E-45EA-9995-76CE5CCEA781}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2723B3D2-BE70-42D4-BAD7-6B61C3748C04}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{27E5938D-3CB8-4458-A82E-1A3F86F34F61}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{286334FF-C673-408D-8A34-A8554004214D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2897F4F2-4865-4829-BAE6-25ADF3943F7A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{289D8E5C-7A30-4982-9928-2321F7728F1D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{28D7A53F-D9A4-4378-B078-7D633808FC18}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{29285D62-0C8B-41F9-9FD9-62798C58783B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2971C941-8153-4BA4-875F-F6F2148EB2B8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{29AA2081-C3BB-416C-8028-BEB8024F0BFD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{29B9730A-C62B-49CB-A0BD-BBA407090988}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{29DB5B6E-5715-4C75-8B59-192C69E0D388}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2A247EF9-68CD-48EC-A313-119CE5B5F331}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2AE58D96-4643-4562-BB32-0BAF50A5B3FB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2AFF1737-670B-466C-8381-72DE52572C36}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2B2802AB-268C-4B1F-869A-FB699504D1A7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2B4961C6-05E5-44A8-B65C-3F0F827E71A7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2B916629-741B-42CD-AA7F-72E163FC6AC6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2BB5F641-9EA2-41FD-A2B9-31E932EE96EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2BD10EA2-426B-4804-ABDB-DE4F9D3E40B1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2BEA4D17-55A0-4A60-B9D2-D32855900E95}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C2C800E-49EE-40D4-B1DF-F3149542E096}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C59BA1B-5C73-4C47-99B4-2E2DF087BC47}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C5DC806-640F-47FB-A841-661DEF920DBC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C679D46-9C15-49D3-A77A-4BB913447918}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C6EB083-86C0-4FEB-A680-C0AE201843CE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2C8DAB9A-00AF-42E8-B6F3-EFE415F117D8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2CB640BB-FBA1-498E-A376-66C6A33EEC9C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2CCDA98A-84A1-4068-98D7-698A7FA6DCBB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2CDDC7D5-CA31-40FA-98D6-CD2624E0DF63}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D0FC714-7E07-442F-9DF0-E9465C7056E4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D1169DB-7AFF-4E00-B43E-0B8163EB8A5F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D49151F-0720-4D6D-BE85-73D330889A35}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D4C0D77-1639-41BC-B5A6-90B849CC3BA0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D950744-7F85-430E-9864-D29613A55614}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2D9A007A-4623-422A-A81E-946C3D76C366}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2E412C41-50A1-4706-A761-36FD2D843B64}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2E9DDBB0-7B13-4F47-9CCD-7D7D3A4B23B0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2F031A1B-9126-4015-A505-926536F07739}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2F54B616-2CC7-4DD4-AA68-6E40DD817228}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2F56791D-3230-4B95-BB7C-CE048964099D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{2FC624DF-565B-4C8C-ACE4-FF99A3D98FDF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{30BA6B94-7B8E-4DFC-92D7-AD45099DAF25}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{311209C5-6F09-4076-853A-C909EF634D5F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{315FD7A3-242E-427D-A3FA-219F21EF2918}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{324C4A96-37DF-4DBD-ABC7-B0A926452CA9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3250B1AA-64A1-4D14-AD0D-5C7B83030850}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{33133BB4-E4A4-4B3F-A1FE-976EAD8C2B16}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{333CDA81-E7ED-4467-90CC-934C33E7D70B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{341E91DC-858E-4F62-8C71-C98D8C2D5A2A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{342D0BA2-3D4E-4178-A7DD-7D7CFE7AB324}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{34DC72FF-8100-4A0B-97D9-DC974A27C181}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{34DFB3E8-F580-4CA7-A020-578CF38F28F2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{359370F5-A93D-461A-BCCF-88121CAF46A0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{35E60337-27E0-4337-940B-22D3DC5D21A6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{360F1D98-2814-42BC-ACF1-5A71140C9949}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{363A50B1-629F-44D9-94AD-11700D40A493}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3688B0BB-73E8-49A1-81AC-CD42AE2D94B8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{369BAA73-2BF1-4742-9AF6-BAC4A54DE3EC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{36CDAEAB-19CB-4678-8BE9-273FC1319FF2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{36E91D10-909E-4F91-891B-9AD3F12771EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{370A68AB-25A6-419D-BA34-FCBA3644194F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3743D728-AF5E-4962-B2A5-47F06E57AA44}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3759DF61-30DA-47C2-8514-529B843BF2F3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{376A818C-3CED-47C1-B517-CFB44CF67FF2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{37AB497B-22B1-4986-B4FE-19D52F8B47DC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{37B330E8-931D-4B16-8F6F-66B1B2BE0DA9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3814D9EF-B60A-4C21-A204-885253BF63C7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{381A363D-AE21-47E3-9A9F-25F9E22FB8B6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{38EDF524-C76E-41D3-8825-E8B600AF8A48}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3901AB7F-CEED-4096-8FB2-FC3E4FDCEFED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{390ECBC9-1996-4E0E-8E7D-F0DE3D89C00C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3A0063D4-6672-4E29-9429-33155E5FA607}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3A1E4C80-7E62-4860-A8EB-B775DE6992F9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3A64D12F-BBF8-4345-AA71-5FCF11867FB9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3A956E55-B786-47AE-B604-9C9675292A6A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3ACD1549-5931-46BE-9FBB-74B79A7CE08D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3BC5C9B1-B493-4BC7-A3E2-E478A5E07060}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3C501C88-BF13-4F36-BF04-A8A54B33720D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3CD6BC14-0232-4920-A6D5-DE406778CB76}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3D6CFD91-E079-4D63-AA65-4C68B07C8B19}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3DB2ACE4-CBC8-47ED-983B-B16A5A322629}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3DEA82EB-AB26-4D73-9F86-852643D96277}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3E0C82D0-B580-4CC1-A164-EAC4E959798B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3EAB0635-6F94-4C1C-BD43-C9949888E846}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3F77B683-B698-4E35-A982-FF61886F2705}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{3FF7E456-9901-4F6E-9B9F-78B61757C1A5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4027EB2C-F403-4D45-83E7-3BBA9DE5C330}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{402D3836-C62C-4EAF-94A6-1C8E5147209D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{40323066-E4A8-4D16-B40F-9C6E908BFF90}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{403286C6-0E18-4533-B5DA-AE18C910B465}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{409421D9-F636-4ADB-BA8E-7ECE4E0962D0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{40CDC973-9840-4A64-A98B-D7A2B4DD02C3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{411AF370-2529-4739-B962-57CAA197F31A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{411CF236-6D1E-4425-BA28-254E45DC978B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41883545-C148-4B7E-AB35-693E9F4C5D64}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41BDFB19-B38F-49B8-9FDF-C5E0D75D2F54}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41C7549D-2122-439A-88D5-02707F99392D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41D03701-C57C-4A6E-87DA-F51FAF39708E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41D95E25-B3C2-4E4A-8F98-5461D0D94392}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{41E3355E-035C-4089-A139-6F0837CBFB73}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4201821F-FC35-4F13-9CD1-68A1DF20B064}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4240D1E2-D6D4-414E-868C-2A89DC739E2D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{425E0D80-E3A8-4CB9-BC36-BB0C61654269}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{430F0224-BE9D-4ECD-A004-F5425E720951}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{432F3895-BBD5-447E-AC73-B405E89A3702}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4332AB8A-A9BA-4E59-9B0D-A68FA9D29ADA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{433C6627-642B-4F3B-9363-9F67F7F48B01}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{436420D2-78C1-4B09-9904-566C5186B609}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4385F5CD-030F-433E-B76F-EBDF0BF3952D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{43FB0624-E465-4FDD-99A5-3B7062989379}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4410FFB4-8C36-4038-9EE0-22E0CD411398}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{444EF696-16E6-4206-A945-A9BCC024B0AB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{449C2169-C1B7-45FD-8267-3DAA4BF710B1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{449DF733-480F-48F7-850C-07250E19659C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{44A6A70B-F918-4F9D-9D6C-6AD44863D9F1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{450106F1-6C6B-4D6A-AF26-33BF5B434CB7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{45443CF8-B2A3-4B97-8BA5-E530BA01708B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{458189E7-D938-42EF-A719-C75A32CC2192}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{45BD30E2-C802-490B-9703-8FEB6AE20D16}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{45C7DB8F-CEBC-465E-AA33-86E41A8B7E10}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{462B4E39-D1BA-427F-932A-ECB62E1BF91A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{46913E53-BB3D-4C82-90B5-D77884D56227}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{46989D61-CE2F-493F-8D97-6955D999F381}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{46A28BFA-21B8-45E3-A668-2DB54FE715FE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{46E3428B-F2CD-480B-B99A-B3185FB638CC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{46F440E0-D3DC-4BA1-9897-C72BB358CDC8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{47741470-775A-40AD-88DA-1C9B65736F51}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{48236FED-CB1E-4D86-AEA7-10ABD202C894}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{484C4E89-8C84-4EEF-A687-97F5155BAA52}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4873D3A8-32F8-4D9C-9712-6C92B8110A6B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{48EBDFE3-DEB2-4911-83DC-43DE98088435}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{49170BD1-4D4A-4B88-A53E-9968918AE4A0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{492A0E0D-B064-48F6-A5D2-110BE8DE8BBF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{49673A52-340D-4D02-A6F4-B550E42E8BBE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{496D2EA0-1ED6-4AB8-8B63-F564A9C92220}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{49FF6EFF-A033-4D78-BA48-B63B72DCA1AD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4A1A743D-56E7-4EB7-A3C4-BA0AD1CFA6B8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4A1A96C9-A971-47EC-B3F2-6A4CC37AFEA5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4AD54DD3-1238-44F5-AD33-C52398F78F5A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4BE91444-FB53-49B0-B8DE-9E7388462843}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4C4974F1-9EB7-4842-B806-477E3668FFFE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4CEE851D-1554-4974-BF99-D9AAC8CC45CE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4D69EEB3-971E-4197-A4DE-D39DD7578E08}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4D806118-AEFB-4D4A-AFB9-C1FA6B166CAC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4D8ECF87-A3A9-4B0C-BCC6-BF6E2FEBCB9B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4DFA00CD-C057-4F1F-9E46-B9D5E42EAF9A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4E631875-52C2-45F2-985B-83226D2E103D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4EB6CBAD-3DCD-4F01-A9C1-23D61BD1CAC7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4F4038F3-81E3-4198-BCD9-04AD673184B5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4F5A7A08-519E-4710-9A92-38B77C324710}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4F8ED15F-6949-42D3-9464-42E206C09872}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4FA7577A-0D8C-4D3A-9D17-4D318E55B394}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4FCEB12B-75B0-4DBD-AEA3-7EB275506EFC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{4FFA3C78-5274-4852-B342-850D0417AF7C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5009CE14-ACF3-4C21-91FE-6EB63BA72AB4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{506E6658-23EF-4A5E-B8A3-B7A859FD32F3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{50846729-B911-49EC-B7C3-A2D36D94A870}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{50C92E6D-4491-414E-B94B-ED4E4F4B66DA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{50CE939B-3960-4D89-83D3-709E307A2789}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{51978652-56C0-44F2-9780-A1DD19BE1B59}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{51B4AA3A-D8F2-4E31-8077-8AA32D2E9FE5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{52803F4D-86F1-4A49-A85F-E2B12771D803}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5297F796-C66F-4082-9617-1F52035D2E20}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{52A8BD23-32F7-4DF5-BE40-2D2F85BAF941}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{540DA479-CC16-4FB4-BD74-86D87BD0AA88}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{541E8645-02AF-40BC-A584-85BF96C46BE9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{543DA811-2AD0-43E6-A1E7-EA10AAF5567C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{544852FA-806C-4920-9790-6ADF52EA59D8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{545FDB3E-65B0-4E64-B406-590A6C7347D5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{548A2E70-414B-4998-A668-1E553332D1EF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{549B73E4-EC91-4DF7-8E41-C7E56FFCF57D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{54A22818-75B2-493A-8EF7-E9EB293B3101}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{553BF2EA-69B7-4CD3-A9D6-427EB4A8ACEE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{55C3A182-A0A7-45AC-979A-D8E573094C27}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{55F150A7-158B-4E02-8E50-244FC16EE85D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{56A9F280-6C5B-4A6A-95BB-EE4D027C3EFA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{56DC4608-2966-4B72-9129-8E052CF973BF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{57085F1B-4E35-4C49-B290-509A84490035}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{570E02A5-C45F-4C45-BC71-69A7B856454C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{573F0D8C-379B-491F-8FD2-55BF3A491AA6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{57416836-3C31-4B38-B4DD-684CBC3F9A78}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5753E2C3-8615-48AD-A6C0-4CFFC5DDE7B2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5779C5BE-0AC0-4519-BD0D-653AA7F5E57A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{57B890B8-9F8F-467C-8D60-452111D5D768}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{57F4FFD9-BBBA-46E7-B3F6-4D9781859053}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{580734FD-6E06-473F-BED9-2441BE4D25A0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5840E19E-00A1-425D-96C8-D191130266CC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{58AFBDC1-EE25-4F93-8108-D4B483F58D70}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{58CA6B87-EF6F-471F-BB7F-A764FF46091E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{58EC55AE-4A4A-4712-A0CE-F5E6ECDB3D83}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{58EE18CA-0A92-4D8A-9B13-7E23B5448BEF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{59005425-7196-4FC5-8A94-FEB47914F738}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5902CDFE-124D-4BC4-9841-FB556DD183D6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{594F37C8-3627-49CF-B4C8-8B2F7D00EB48}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{599D7ECD-495E-45CC-946D-AC35E854FC18}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5A7DF29F-BB00-447E-9584-5EF719A4B7B5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5AA2307D-557A-4A95-97AF-D8DB94F4C6EB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5B4B7FD5-406B-4A50-BBFF-E257313A63D1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5C190547-7CC6-40CF-ACD6-F5304A011E58}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5C4E96A4-0F92-4EAF-9EDE-1B41B328A8D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5C96F907-20AF-40B5-A6D6-052633FE660C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5CB4986C-C583-404D-B79E-8824133D24A2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5CDDAD04-1920-4F7B-9B63-BC326D43D268}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5D338350-F285-4D5A-A733-758941265777}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5DBD5050-99A5-454A-A30E-6DA9969CC6E9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5E1E13FE-A58E-4E30-AB65-D10F2F844942}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5E2D8F7B-2972-42AA-8228-8B3B08D956E7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5EA42E85-1454-4D3E-B5D7-8BF35C46D91F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5EDF9569-F6E3-457E-BFE6-076BEB59BFEE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5F022DB6-78E7-44B1-9AE4-355E9E7F64E6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5F2CA16A-600B-4B33-B65F-BB37F31FBDD8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5F8E8B2C-19D9-41B3-958F-1DE559E8D621}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5F99AC86-75FD-4282-B899-745A2C955234}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5F9EF6DB-3701-420E-9AFE-44EB7CF694CC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5FC9BD49-744A-4FE8-B1E4-0A27FA53173A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{5FF091DE-6265-4979-8231-BE6D7DF61684}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{60446BA9-6ADB-4C07-BD14-E2B71DB61938}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{60596D05-01E8-45D7-80CE-5E940031A5A1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{60B66707-01F4-474C-B321-E20E0AB21E5A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{60C273F3-9620-4833-8A86-5520F96A7594}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6115597C-889D-434F-94F0-04A4AA183A18}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{612EC9F1-4E45-47F3-A048-2C4C4E3A45AD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{616433AC-5088-4CB1-A6E1-79DED243428E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{61A33945-F6E8-47B2-8A66-FC2028FB48EB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{620A4659-8474-453F-96C4-0420B88D629E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{62127167-4380-4272-BAD4-39BC53692FE3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{62587433-ECFB-442F-9BAD-DD50AB71D7FC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{63055A44-DE8E-43A4-B7F1-704E4DB8E7D0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{631800C1-E3C0-41BD-9690-A909BA5156C2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{63540FF4-058A-4693-96C0-F1B6F673FC49}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{63C95AC5-FE0F-4810-BE35-462CCCB96DB7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{64339AA8-CAF6-4922-984D-175B71EE74D5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6489FB1C-E31E-440E-A0BF-C0E492991315}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{649E59B9-1249-4A2C-8ED3-95A0C86D4EEC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{65EC0A97-11DE-4D4A-AB4D-BA2A8684F9DC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{660BA98E-7D3B-497E-8223-E342BD8C1A13}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{668452CC-66EC-4A0D-9178-CD62271B0303}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{66CDF82B-5089-41DA-9153-C577F1C528B5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{66E8B587-A547-41F7-97B8-BF876EDA9D0C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6729F505-854F-4511-B7CC-6672053B56DF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6745FCB8-4D99-45C8-9C96-92FEBEE746C7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{67A87E89-472D-46D6-BC42-313990AA4CBB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{680DADA1-5EBC-4ECE-B72B-26383A0D76C4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{681F7B0D-644E-462A-A7DB-EB6A7170F8C5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{68ED989A-0A1A-4388-B8BA-B07ADE79770C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6933C779-D84B-4DBE-9D49-2B3B8E777FD6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{695BAC4F-0B3E-4A4B-8E71-6C0AB8D6639D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6962BD85-0D14-4628-9717-C075ED997373}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{69673DF7-CF68-4F79-BD96-65B8DE858D3C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{69AD9531-9931-4B7A-8E6D-43C3452A9CE6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{69CECD92-0BCD-4CAF-A961-F0EE06F4F2EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{69DA4462-5884-4492-AD58-B9C6F1B69F72}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6A29B72B-9FC8-4F6A-B942-2E8155324545}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6A3B9F19-1213-459A-8FDD-79610BDF006C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6ABB362C-1D79-4EAC-9857-62B21F2EC5DF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6ACA593F-38A0-4746-B6A1-D257BA8AB6B7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6AE02207-6F08-4572-B015-14B53856F725}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B0368CC-98A3-4EE8-B545-1DD8D5678224}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B0C3B25-B928-4D8D-8642-4F38CD53EC32}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B485667-35F9-4A89-A07D-0740FE0E1D39}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B4901D6-2768-4358-975E-B043D1201792}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B595DBD-D338-4938-9FA8-D3B1DEADA9D0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6B8B7A99-2493-43FF-A966-91D7A8A0E248}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6BABBB23-7C63-4ABE-82F2-44C60B295E51}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6BF2A95B-7C68-4241-B3C1-B713D8659BA5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6BF89185-5825-43B8-8D6C-4537D4F0B985}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6C28358F-2EB6-4F5C-8225-F8F08CA338F3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6CFD5E01-B37E-441C-AF9E-EFD00180AD61}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6CFE68FA-586F-4CF8-8213-D4DC6B18AAE0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6CFF5157-D350-454D-A8D0-A873BE61D49B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6D48F6F5-200B-43F5-9E1D-7DE3112B4293}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6D62D701-DCC0-4C41-9069-749C27CBF874}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6D74C931-753D-445F-8929-F278BAC5225C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6DE28358-97F4-48A5-86EB-71238A36F8DF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6E31DEFC-8799-427A-8C0C-1A9C3A19A404}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6E45E118-1A98-48CF-A7B4-4B7C64E718B6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6E462F9E-3A43-4A61-809E-8F4540A6499A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6EDB270C-768D-4109-B786-BE9C75B5DEED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6EE3BDCB-F0F6-4A08-8F9A-77AD34F11386}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6F864A7F-1CE3-4E6E-ABA4-7F4452D26D5B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6FBF5C36-945D-49ED-97F3-61DA4F12225C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{6FEAF698-2A45-434D-9C10-6051B1BA3BD9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7028EEBB-E999-4541-AA7E-F12390249660}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{708FA329-8051-46CC-91A1-E970477DFBFC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{70AA0466-DC94-403C-813B-1D130DDC3798}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{71304962-A9F2-4CD1-A5CE-D3C77F4FFD44}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{714DF12B-C4FA-4878-95AA-2F4DEBDBC6F0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{715BAB5F-15C3-4996-83D4-FF456E861CC6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{71D96681-8413-42E2-BFC1-E3FE795F502B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{727ADD6B-2C83-4199-B1E2-21106FAE09B2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{73480C0F-34EC-4AD1-BCD6-662DCFB30A1D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{737B6B27-78DE-4885-8824-F5A30B04CD08}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{73AABD1B-56D1-480D-9143-C7AE9D063B1A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{73C7D063-AFE7-452F-A95E-3C3B6E9A608D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{73F9FAFD-120F-464C-A5D3-CD0EEA3E6E7B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{745FA1EC-9F03-4562-B5F8-26B0159E7E67}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{74D6250F-5283-4659-8264-467F74D271C8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7551E4C6-1128-4C87-B8E6-EC0177FA1AD0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7587A308-6C3A-4604-858A-94E7F32C0933}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{764838A7-59B7-4A44-829F-DE169D0AB62C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{768DC9F1-61DD-44D7-8ADD-B3851FFB78D1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{77861210-D7D8-4C13-B410-08E82090FA96}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{77ABE0C2-514A-4D13-9A95-ACEAB670C098}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{77BB64F2-E50A-43B3-84DD-7B1543E26D42}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{795FBF89-11E3-4E4F-ADAB-FC6374EEFDEB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7982A7C9-1D29-44A6-AE66-1DA233F40EEC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7A6AB648-1F10-42E8-A0A5-DC5A28E4E383}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7AE70BE2-241B-4FB8-9477-007D79395020}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7AEE5029-3020-441A-A525-0906F35F3DF8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7AF30561-D813-4182-9941-12000C2B5757}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7B035B47-976F-433F-A197-077EA8160F50}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7B348E61-D7B9-4984-B9BF-969CDFFD480D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7B54E958-886C-498D-A458-938D50F9421A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7BD0AEDF-CC34-4900-9AE4-7A5DDCF02836}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7BEA13D7-322E-4947-AD69-A241E9A1B3C5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7BF62443-1DAC-47A3-9328-C4EA807C38E4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7DF237C7-7E6B-4E5D-8CC8-CC102E0AD5DF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7DF91DE1-FDA1-4913-B214-BEE7ED062A57}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7E189BBD-A8BA-4209-B1AE-5EDF743B0005}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7E2EE56B-63A8-4978-8D82-F09348F8F76C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7E5EAAC6-1A6A-4F59-A26B-96150D5E058A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{7EB01727-D291-4157-BF97-327D3D3D62B8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{80200F58-8FE8-4C61-B5A9-8067054565B6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{805D0B4C-3B46-4CAD-A442-3785F364DBE6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{808E5A39-64C5-4032-8909-B67295D88EB3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{80986393-74D3-44AF-BB6A-1E60A55C9792}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{809D3797-35C7-4040-9D58-3204AFEBD522}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{810557A9-AC1E-42E3-BF66-87CEE63E7CEB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{812E5594-15C6-4516-8F94-628D513C096F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{81CCC4FC-49F8-45DB-BA41-F635C91EAEEB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{82518E4A-446D-4CE5-9839-3A045CA9E102}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{826A2FE3-5D74-4EC8-9E96-F05F538C24D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{830488B8-3E74-4565-A30C-2C03B07F1401}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{83070D43-D009-4804-9AD1-532EDAADB9D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8310B669-6336-466D-9585-FA636325E68A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8331F3B8-66A4-4E21-9277-602E1B26AC5E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{835E32D8-D39A-4CCD-AD76-B8CFACD25961}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8391C452-15E0-4B0B-9AD4-17CBB18DD172}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{83AE52F2-F972-417C-913A-D3D54F8513F6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{83E10728-EF54-4816-8945-15FBD3E8A895}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{84054B1B-AD31-4B94-B865-665B9E4427EC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8474BC3B-7196-426B-A2B8-D499CF96ABAC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{84C0B2A7-68D2-4230-B1C5-F4BDA66D8190}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{84C90F8F-1DBE-4438-8835-CC2A35F24D23}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8507FC28-906D-42B9-B3FF-B40FFF7F5227}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8560F991-E528-4B65-912A-4E49C47E1152}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{85615783-590C-49B8-804E-3BF5068EF7F0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{856BCB94-BCFF-44D4-95F9-CB3A6BC941ED}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{85B03E02-9FF5-4ECC-9D66-B6D229BDDE6D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{86753CAA-534E-416B-B0E7-0A2B379DCF7D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{867AC2E2-CCE3-42DA-838E-96A4B3AE39AA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{86C1832E-247C-443A-B29D-38E41FEFF79D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{86C940E7-C254-4A3C-8FEC-CE5814ADC59B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{87248028-2202-41BA-B5FB-5540A6D49562}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{873385F9-EC32-4854-8AF9-9BE046D3D1DB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{874B1E8E-09D6-4C2C-A815-BDD1393B7953}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{87582306-21AC-4D6A-B440-A8A03E1334B4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{87A3DA6A-2FD7-4ADE-A75B-7AE7CC6B3866}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{881878D7-B5AA-4E51-9A07-67AD0DEEB09B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{883B2E11-FCB9-4584-8585-8AF91C5A3DA0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{885B97D3-4055-490D-987A-2C6C1FD6990F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8873C044-D6E4-4754-AEDD-DE9CA2A823F9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8889C61A-DE75-4BE1-AC91-CC33216A1A47}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{88D21D58-953B-4351-845F-E29AC5FC2BC7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{891C1CF6-D0F4-4F31-8B48-9F25752A0B4D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8952F9F0-474C-46CD-B33A-FDCA94D17C68}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{89685B51-8CEB-4F9E-871D-91CFAB103E08}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{89913CEB-FC59-4BF4-8CCD-DC2ED0AB72BF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{89B7AC81-A4BC-482A-AD69-6C0023F0C295}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8A235640-5D75-4333-915E-0157A9DB6157}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8A3C70E5-B1E3-458C-95C5-CAFC92B0A5A5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8AABA3F8-D974-4468-B042-0DC7E148A124}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8AB7C6EF-5CEF-4D09-A9E9-ACE8C1536352}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8B8D4BEA-2712-4910-B8C2-24D3164B2948}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8B90E6D5-DA60-4568-8319-643DB17455CC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8C1FEAD9-46B2-489B-A158-139DA780DBE2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8C250EC2-91AE-4722-A619-29E64C011F98}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8C68C445-396F-4386-A776-8B0182FE7BAE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8C835C52-F493-4555-8948-808C26FA878E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8CE68EF9-8423-4727-9B57-30D040AE3451}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8D19A72C-7AB8-47E6-B54F-BE9369B7F509}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8D698267-3DE8-4447-B99C-1CA6000F65F1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8DC33852-2F9C-4DD8-A2E2-D3D8E123B0BA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8E42E0F9-9C11-4695-8DB4-F3266901DD6A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8E5AA586-5C80-43BF-BD68-B5A7F0DE2157}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8E640B9C-324B-4746-BC5F-0DD755F99025}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8EB0DF75-25A5-4506-B7D6-EBD23128D532}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8EE143E3-9A59-4A87-A389-9417046D25AF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8F469944-1DE7-4364-A6D3-D50EB5389A0A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8F655463-C65E-4930-92FB-2ABBFEE651D3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8FB308C6-6093-45BE-BA2F-C64CC78D3616}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{8FF018EF-D45E-4716-827C-403CA6F27141}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{901DCB71-3DE0-45B7-BC80-9C6ED83113AA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{90531667-EC13-4F4D-8044-1911BA390384}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{90D0DF21-7210-49A3-AFF8-5C438A3CAE83}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{90DF98AC-A82F-423F-B283-F13B12B71E57}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{917B2928-4A5A-4276-B9EB-D42A6B7561B3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{91DB8E6C-93A5-4FAA-A8DF-1C129CCD8EDB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{922F014B-915A-45CA-BA9D-90827882DEA3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{927F9F88-E3B5-4479-AD3C-F5412E0F7C2E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{929FAF83-D9A7-43E6-9237-9B5BAE9639D9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{92C8BB8D-8BFB-46F0-A8B1-F47CFF1658A0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{92DF85D6-1C72-4CD8-BFA9-DDF32326BC74}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{93045CDF-2808-442A-B44A-92BEF85E4FE8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{932B643A-F84F-4197-81EB-924FF7E03DD0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{938D2429-36B7-4FE0-A538-E5CC72099AD0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{93D0DB62-6A77-4ED8-8F57-EEC34CA1E744}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9486C54C-023C-413B-9FC4-77C8774B1916}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{949210E3-F81D-41C4-A4BB-30443CF188C1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{94D0119B-2965-4084-855B-482D6CDC90C5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{94E070E9-8FC9-47A5-A655-4894D879FE73}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9503C73A-C63E-4733-A4A8-AF4001B454A9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{950A012D-4D99-46C2-93ED-AEBABA471A25}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{95861466-A2D7-44C6-B10F-CE7FAAEAA4CE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{959C4992-BE55-4776-BDE5-59C11D1AA546}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{95A0C935-E2CF-44AF-B865-B319D065CAAF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{95C352D6-142F-4B99-83F5-77835AA11458}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{96331847-4631-4286-A25A-231518B2D2D8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9657B4A0-4925-4EA5-9F6D-4D3FCB0C77A2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{96635CE4-B186-4E11-BB3B-BF44D4511700}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{967CE762-6404-43A0-AAE0-2D3119D6AB99}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9694C33F-77A9-4D69-8CE7-E29B1A0AC846}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{97D76C83-1F2A-4725-8AA7-503283A922D7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{97D7E46A-952B-406D-BE62-1048C48057C9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{97F11FF1-728D-4798-A23F-1858595A73D4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{97F22B4F-739D-4673-B550-24754662113A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9807043E-6B06-42DA-8A02-9018AAABD25E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{98339EFB-F57A-4016-878C-1FA78E0AEAEA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{98492CD6-66B1-4377-88A6-7C0A75797F37}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{98547E21-62E5-4069-9A44-9032B0A10CC2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{990B89B2-BC46-4BCC-8BAC-A71F15460455}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{99CBD1B5-332C-40A3-9077-B9DC796FE591}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{99EB5B69-C2C6-4802-88D2-74478389B571}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9A089508-B6FE-4A06-9429-9355F6196159}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9A99CE1B-620B-4003-9461-EBF183520AB1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9ACC4B2E-AEFE-4F4B-B605-2B67A477E94B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9AECA057-4052-489E-9E60-9D1F027A8A5E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9B33A921-B31A-43A1-9F58-E95D49F2FDBF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9B74407A-2220-4734-A186-EC74F1D2BEB5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9B9DAB79-CF7A-4D9C-B587-5D2300F22D73}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9C7CA259-E6BB-4B98-AD07-0DCFE93C2E87}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9CD0BD6E-258F-43EE-97E5-77F0C2B8093C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9D3725FB-37F1-4549-91A1-8C45DF1C7A72}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9D5C0AB9-9037-4729-9451-5739346B8362}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9DFA550A-E3E5-4085-A909-3B9487C76D46}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9E1E336E-3266-44E7-9197-15FB83054BF1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9E4DDC86-6D21-415E-B27F-745B8E6251D4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9E8C85EF-55CF-4845-86EC-57AC58003297}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9EE5A45D-4A2A-4354-A47B-7E03B5E4D2A4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9F116C13-BF82-4D41-BDD9-D08713F766CA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9F1D52A0-7C83-4370-A78A-4B1A7BDE6699}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9F3947DA-305F-48FD-9271-5A534A7B55D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9F47A823-2A6D-4EB6-9CCB-5CA69E92B900}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9F4D8368-C59E-4C50-9AE2-C60CF30246A9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9FBD6C56-F181-486A-AC8A-FEEC253D2132}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{9FF048AF-B02E-46FC-B61A-7AFFD9B8D137}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A084CAD4-841C-4BB2-A09A-6CE1BC879F62}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A09D3448-7B80-491A-A0E1-19CFC21C27DC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A0A26A90-ED16-4534-9E6A-D35ABE241F24}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A0E528B6-2DD6-4493-B4C5-196863BACA74}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A0F334B7-E518-4D30-9889-53C165682065}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A104D5B3-1878-4231-A1B9-9C33F8460B7A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A180FCEE-346E-4947-88F6-68323556825E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A1B2CA1D-44DC-4EC4-BBEA-D82F3C6DB126}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A1C22E48-A80E-449D-B831-84FF8C16BBCD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A22F6819-A651-4A6E-8066-7572BA476919}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A258DDAA-D824-4D70-AF3C-11C5BDC861A0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A2BDB282-6507-4446-BB84-DFF6889A7E80}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A32E3C0F-4FBB-4D3F-81BF-58DF60A64AD4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A3B2088C-9A42-4545-A2F6-AECE6BA2C3D5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A408B93F-B77C-4A4E-8C7E-B4C14B877093}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A40D191C-6714-4097-B3BE-D162A039E396}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A4D50CB0-9314-4BC2-BE1B-0C7A6695C05D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A56B6F91-0A52-4F97-920D-D738B1029082}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A62BA055-D204-47F2-8683-8F5B7ED8047C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A677C377-223C-4E19-8A22-49669A6A817C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A69409E2-753B-444C-B6C9-DCC3A9F5493D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A6A1E858-8DBE-4A33-916D-38DB192DE73F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A6E18DA0-3A0F-4CBC-9899-BE70F343401E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A6E7BB6C-B264-4AC6-B97D-293BB961A60C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A730A961-9DBB-4343-B72C-6E5C367FB696}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A7416A65-7A59-4DF4-AA1A-81DC9971EDDF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A748BA10-7351-4AE2-BAB2-F43B0D570B42}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A7A65840-FC28-4A43-8F77-B0F6C9AAC004}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A7FD10B0-8377-4D66-8A28-730AED650B3F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A8855A67-E034-4BB7-9829-43AE3C00EEF1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A8A2AB83-2F41-4CAB-A1B8-43C7D15C7869}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A904545F-84C4-4CEB-853D-80C697C87DE1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A977603D-944D-4F0A-A3CD-F73D5BBBB60F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A9AD319B-F6D6-4526-A1EE-1FBAA2809EA2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A9DBEBFA-A624-4F90-99EE-0BF003114792}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{A9E41C64-7B22-4EC3-BEA6-39885FEE8B13}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AA035B5C-E2F1-42E4-BD0D-8B7C2C0077EC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AA17A6B8-62F2-4D42-9EAC-02E4062B7D0D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AA22F713-D05B-467B-869C-A4E2B3D6F4E5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AAF305D6-FD88-4479-8EE1-CE9431FD5400}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AB10403A-5C1C-477E-B12D-34090B23A568}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AB83EAD7-8E9B-4927-BB25-432E69F494B1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AB9ABB15-96AE-460A-A560-ED84C8B32E01}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ABBD2555-8C92-4094-B27A-D416B6A1BEC1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AC4D015D-4412-437C-A1B7-E331540F966E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ACCC9FB1-B356-41AE-B3F3-2CC97C3F9CCA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ACD29921-0D1C-4240-A333-EB2C736FF366}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ACD5E9F3-832F-4F5E-B644-C17CD1C31B89}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AD0A4014-46B0-4B9C-9524-0420E989C023}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AD1831AD-AF91-4237-8655-EE3A37E6997A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ADF0A365-006B-43F3-92B4-995C956A57EB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AE18185A-AEF3-41C5-A963-F5DAE25F9BE4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AE47358A-7896-40FA-8A29-2CEA259745BD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AE6D8251-C614-4DBF-BA13-326421A55C7D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AEA7B8AC-49E1-4B2F-B1D7-D1AB5DFF5880}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{AF4E7A4C-A3F4-4EC0-B565-168826AA859D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B0217095-43DA-41E3-AA6B-B978187E0E00}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B04F3EAA-EBAC-4B8D-964D-8DF20C0BB4B7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B07F58CE-0E86-4A58-B344-90B745C619B0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B08229FF-79EC-45E2-94A7-FC42C5F24935}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B0908BC6-CF0B-410A-AE77-18D5000B1E61}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B0AC21B5-2F9A-4B89-BF6B-21893D8AFE7D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B0E2A4DA-8045-431F-8F39-8CEECC63DCF9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B105B979-8559-4817-8EAE-BC0E31B75A0E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B1D462B5-B965-4428-A62E-328EC0F99A19}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B22736E6-1291-467F-8689-09A7944D053E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B297BEB1-1D3A-4037-956C-BBDE7F967479}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B2F549D5-5639-4F20-B760-62F47DC4EC86}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B35DFF9A-AB63-4C2E-8F8E-AE3CB11029B5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B36EC473-E68E-4443-BA1E-DC3FB3ADA165}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B3C09FA4-59E4-4FE8-BD63-4BDBC784D926}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B3E1AF9F-2BC5-4F7B-B46B-3C7C23C87972}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B3F0A1BD-998B-40E5-85FB-EADADA55EA2E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B439C744-0CAD-4C7A-A691-A2F13460DAB7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B4627802-CABD-4502-B86F-F61B10A0486A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B46EE786-03C1-4485-896C-A9101AE2FEB9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B46FF589-FFFD-4256-B8F9-8EAED5C69A22}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B47E69D3-817C-4FD3-A987-9959303C2E4D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B47E9832-0E85-4BBC-BD80-F6291E01A722}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B4B7D06B-0322-4191-A0B0-E0F1475AE44C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B51C3D7C-CDEC-4651-A968-A268C2C4EB9C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B5720D2A-E35D-4113-9C90-D3140648A152}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B579D278-8089-45D8-B7A5-E70E9B258078}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B5A87886-8E0D-4708-A981-4D145863D061}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B5B56859-9F44-482E-A59B-64058DFA08EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B5C2A4F0-F519-48EE-8D10-6C66B257B8B4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B61CEF64-CFC5-46F9-A72E-FED666C1840B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B6ADA4DA-090A-45D2-BFDA-E2CB4794DB31}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B6C2A8C1-E8E8-4116-8D89-96571CDBBFEE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B740C850-2779-4CF9-B385-0E2B43138CD4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B75484B2-64C8-4469-A75C-16FC2E7BFF72}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B7863510-FE04-4F81-A812-8D8DC6BC4981}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B7DF163A-3513-490C-9D72-E80D33A4CCD6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B815C517-0256-4878-BA26-F1A3BF5DDF24}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B861929F-8270-47A1-9210-BF20D00EA467}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B8DA70D1-7B68-4377-B73A-4A08D9846726}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B9DBD0FF-4700-4717-866C-9DF39C669A64}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{B9DC4B64-07E7-47C4-BE58-3D6582438710}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BA06AED9-2634-4510-A633-0D77335B48E7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BA2B38F5-CAFD-4879-AD62-F6A77FA214AE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BA89135F-F9A2-4675-8FEE-C377A072F729}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BB271CFE-B573-4E5F-BA25-9B33E1C37E48}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BB4D5163-787D-4316-AE5A-15D7197F7069}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BBAAE886-2B39-4D0E-8814-D4042258CC9C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BBFFC746-8ADF-4887-ABA4-087E1703597B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BD201E01-8F79-46BA-A1F4-7D17B299E5F7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BD286735-FD94-44ED-B6AC-96B5B050458B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BD3DE00B-B100-4FF0-9170-70B970CA7AC6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BE0BCF75-67F5-4FD5-B7AD-31F0CBE5DC59}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BE474E80-674C-4989-AC6A-3DC1EA750E84}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BE5C4BB6-6FDF-4D20-BDEA-17270BC71312}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BEE80525-A7B8-41EB-9BDD-90A66624A98A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BF02D508-A676-4D03-A451-3FBDE4C1C585}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BF7751FC-C250-4F57-B85E-C3C4C96E53D8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{BFC58783-CAC7-489E-B5F5-FC4C844E186E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C046FF3A-AC97-49DD-986D-9CB58FF2E0EA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C0565841-C931-4CC4-897F-C315C405DBB9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C066F7CD-D2E8-42E8-8751-7A2B01B50D3B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C0A82F00-8236-46FC-B6FA-77C86375E336}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C12FE7CC-811C-44FF-8B9F-144C56C188E4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C161C6AF-0BD4-400F-9DD5-01AFB615DD8A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C1A70DAF-A11F-461F-976A-8DFB679BE6EF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C1ECEE32-DF38-4822-8D05-53FDCC8592BC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C2BDE993-7B1B-4156-9AE1-93A30F8AC083}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C39AF79B-EA0A-4FA7-98DB-019D06D44A04}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C39EA6A0-0540-4295-9925-B842A950F7FD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C4166E23-DE34-498C-AC61-CA0603810E8F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C4690ECD-1260-4BAE-A030-0035ADED272A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C46E441A-3E35-47D8-84CA-CD66DD84E794}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C4AF9970-7FE0-4C25-9460-F67667E5862F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C4D02617-209A-412E-B203-E08202AE2E8C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C515DAD1-BE97-43F1-8276-66F34AE5152D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C53FDF74-A3D8-4252-A586-84455FC46F01}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C55AD1B4-E89D-4F4B-AA0D-B9E681A46769}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C5618C8C-574C-4FF9-972B-78A528E3F1B7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C5673316-0182-45D1-9BD4-FB5ADFD288BB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C5B6EA57-6766-4108-A711-273B1ED22218}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C5F7FACF-1E29-4A9D-90DB-A31B921CEFEE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C5F891F4-00FB-4B75-A46D-557C6FBB4213}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C62A1C44-DFC2-4E96-993F-766B5DA6F53A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C69DD762-AE99-4C23-9FC7-932C64FFFC8D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C757F593-11FE-4780-BE3C-EA578C2A6503}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C915C820-A114-48A3-A6E7-2EDB58433C48}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C9C965E5-89BC-47FB-B94A-5C862839A862}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C9CD2C24-8BD9-4460-A46F-8C8FBFC91CBF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{C9DD841C-6B9A-42A2-912A-615962A64815}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CA2D7222-C1B4-4EF7-881E-B52E45EDF2D8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CA37DCE5-4112-4364-8A0E-514EA8A18DE9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CA73556E-297D-4D08-B130-C9435315093A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CAA6C933-C6CE-4893-8B0E-0A69E0AA0F1F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CAB9B162-B410-4F9A-9404-833C28E918B9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CAE5E881-9CD2-40E4-B7B6-B882F19888E2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CAE9F604-E758-4E99-BEED-A661AC36E7EE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CB0A44AD-FF19-45EA-B65D-AE6E5D6DB451}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CB2EC844-84F2-43DF-A423-753F6D6695CE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CBC16CD6-18BF-405E-8E57-3A03534C7575}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CBD61CC2-F125-432B-A462-DC986EABC617}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CBFB4465-CE80-4747-8B71-727E7B26034C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CC1429E5-858B-49DB-861E-E7E053015510}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CC155C8D-1C2F-40C0-8E39-EDBC1846985A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CC5AC8D3-CAD5-48FD-9D5A-7B065DB91E6B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CCD2F474-1BAB-40D3-8AB5-40B2C19F32B2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CCD5DA75-7973-4D57-8F13-697BD3C06D2D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CCDCFA0B-EC4F-4B0B-9480-EE2FB814B112}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CCF974AC-0CA6-471C-A9B9-DA5F050141EC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CD05F98D-4DF7-4475-92C2-4C022862A593}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CDEEBA0F-08F5-4F32-ACFE-90A5E28B6382}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CDFD3930-9185-4728-8C49-6DEC096DABB1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CE684207-4873-4CF1-A547-3F24420B3250}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CE820E14-21F5-4835-A037-3A158ABBE237}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CE826019-C95F-4ECF-B651-E89A8D273D41}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CF8269DA-6116-4804-A795-19C47CD9BE08}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{CFC54A65-3093-4F5B-9C38-4C2EBEAEF719}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D013CA55-00FB-4695-84A0-F7B20A5CDBE3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D049B8B1-5BBF-48AD-9E38-79BA88255CFB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D05BBB52-0A1D-4441-ACD9-4F9BEE74582B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D088FD90-2ABF-44C1-8EE8-427C3DAE67D7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D09CAD31-F11F-4994-A772-48933A55E902}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D0C5A746-DCA1-482D-996C-8BEE2DF2ECE1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D13C216A-5EF9-4943-9568-FC1B726EEF96}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D15C0F46-85B9-4D00-AF59-B7EED31B4A34}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D1C0F0BD-D5EC-4D04-803F-0004A32AC82A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D1EA70D3-88AD-4D3E-AA53-CFC0FD861BB7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D1F50ACD-C618-48D7-BDAB-B3F6F176C2DD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D22D9329-5A95-4218-90DF-84D65C70FF8A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D2804F99-3438-47CD-BA47-08C09EACE68A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D296AEC0-287F-4EFF-A8DB-2F410E76C855}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D2FCC3B9-CCFD-40EF-B387-DDA5F70E524D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D30A2B03-7CA2-463E-996E-94693C9C17B2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D3EB7BE3-FB46-43E8-880F-3E6BC4F7DBE9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D3ED5F9E-2A96-4963-B830-845AB47A4BFA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D4995298-8638-4DFA-8136-24F80E5C223C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D4E5D4E7-1BCA-402B-ABB4-FC5A39952624}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D4EA2A27-47B2-45E5-94F2-9BC8BC42E67E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D5734FF9-B784-4EEE-82C9-30880D0EE7E8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D5FA225D-B3B3-4DD4-804C-F3D9113FDBD8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D6395B63-6EEC-4C3B-B5C0-F9EDE3EBE2A1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D6DB7870-97F6-4A18-AF57-E5A956120546}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D6FDA53D-49CF-43CB-B717-7054782193A6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D70A0AA8-B111-47AE-8BB6-1AA0102204C7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D724D2C9-E172-4143-B312-475527EE7948}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D7457C0E-F9A1-4C5A-8395-F098C5443215}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D75BC107-B8AC-4AC8-BEDC-1066300C09E8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D8783F05-B78A-456E-8F3B-195AC5961C21}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D90A85C0-F868-4719-8322-DDF1ADF5E5D0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D911E30A-418D-4BB5-806C-C2C344173499}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D91A8319-2B10-4183-8E76-787876F0DA80}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D93D6A08-632C-40F7-910E-57EE842C172C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D95A4651-4BE0-4169-A530-0D00510FF53A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{D9853A77-2712-4467-B238-1E3C28605A43}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DA0768E2-056A-4E30-B17F-4565506249D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DA3E4D07-E3A8-47E3-A075-0D0578CDA884}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DA49DD9A-0AA7-4D15-961F-7BB1187D9778}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DA53F276-CF2E-48FA-8883-27DEC8E737E1}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DAA7A72B-E5C4-43DE-A75B-3C50C3A59373}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DAE5D22C-C7CE-47EC-B8BC-E4AF6F6C2273}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DB4A8CCF-61EF-416D-BF5C-EC7618A2E599}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DB644ECB-6F9F-456D-8F67-484DBB15E433}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DBA42E59-4788-47E7-A56C-8738CB2277D2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DBD70FE6-4959-445B-8FDB-250118F2BA37}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DC6AD8BC-7D96-435D-9450-599F5CB348FE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DCA8F57E-F867-495C-9913-E121482517A2}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DCDEB453-FB4A-477D-8FD4-13286BA754B5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DD8F17DE-2278-4351-8FF8-0BCED9836F4A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DDDB12A0-19E7-4D69-88AC-0F4BB6EA21CC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DE323A15-641A-4138-A8FC-D78FB84AF66F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DE867DE6-C070-4395-BDE6-52D1E02EF71A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DE898187-28F3-42F2-8773-0EAA021897BF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DF1689CA-A84A-4A51-9DE3-EB57BF961457}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DF1CA133-6B53-4EBF-981B-D9BBE0F9EE40}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DF6185E2-613D-4333-B056-FD0D1E4FC2E0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DF64151C-12DE-4E75-8034-30BBBBF60536}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{DFAC4344-3937-4FDE-AD47-38716228CBE8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E03CC947-6A97-4691-A06D-8702D492FB37}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E0AE5DD9-1502-4D0D-BCAA-CA7AFB3A8087}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E0B2B9A1-A394-4FEC-900D-6E959AA0B118}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E10917ED-FD3B-475F-9DF3-379FFFF26A17}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E17748BA-4ED0-474D-88AC-13967EF00A51}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E220EB54-2C43-4095-BB0B-453737CFEB42}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E2362A93-56E1-4433-9C97-DB298001D179}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E2C41B54-E43D-4E07-8840-DDE7BDC34575}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E39FD6F7-417A-411C-BE23-65074A4D7678}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E3AC8255-093C-4B30-AFF6-49CB62C20FB5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E3E92923-21DE-4DD0-8C91-DFEF7FB13C56}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E3FFC1FB-5D17-456E-AA96-D7F4C1E34A82}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E4277684-9B8D-4B70-A434-22615EF68174}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E55D0414-6C2B-45A4-AF78-F594CDFDB6A9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E572E0A9-9366-480B-9D84-D40670D55566}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E58B4A0B-ADC7-42A1-82C7-CFA6CE2817D4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E5AC2C18-0184-4F07-8B20-56730EB44BF3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E67497B2-7C8B-40D0-A366-C6243494AFF5}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E836579C-DF19-4C08-ABC5-D907F7A47BF7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E84C666B-B6D8-4065-ACAA-BE9716006B71}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E8C9BD89-7F03-43C1-90A3-5F11DDB8ED9F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E92B8809-4D22-4479-B8E2-776CBD7A678A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E9441067-E0EA-477D-BE12-73BBCD3D22EC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E982E2F2-C367-4BBB-AA71-E48C5A242937}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{E9AABC6A-C3DF-41AC-A2D7-B1EC26B7436D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EADA34BF-6B29-4CB0-9DF3-A2F65B471883}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EAF3972D-6E0E-4594-A2D9-A867646A7689}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EB0141BD-A334-4786-8C80-FD613AE9015A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EBF03960-2001-4EA1-A751-A8FA2DC63C35}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ECD08FB7-4ED1-4929-8E3B-25099BA0623F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ECE833C8-9FB4-44D9-BDD0-33145D352E1D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{ED880139-412A-440F-BFEC-51A4419A471B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EDD60D58-C2B9-4445-9BE1-B26D168F0BB7}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EDE1D56A-DC5F-4874-9B80-B9F8E130F116}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EE042C3A-2FD6-4FDD-9345-4E3072D9D07A}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EE5BDBBE-7E58-4B83-96BF-D29FFE0E0CBA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EEB95AA8-C622-4D86-85D9-69E52110D759}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EEEB1A69-DD7E-4BD1-9BF1-821723F5B765}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EF4D2F6C-94CD-4189-BB63-F43F78B6C712}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EF5AD127-CAB0-4338-B522-8ADD495B17E3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EFD9F9E1-F075-42F7-A32C-8376EFCD7DA4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{EFE2EF8C-200D-41E1-A667-AF6B944AB8A3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F0055BDC-F27B-46FE-88B3-323809C0355E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F08E75B0-29CA-40C1-9D0E-C41DC5FDE27C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F09799E7-17E8-412D-A020-A5A9F3D4F4BD}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F0E96FF3-405D-42D0-949D-91A22F7F4249}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F1817C63-338A-4F2B-A03B-55C65299D0F8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F1A5AEC1-E063-4F00-936C-47D58BEBA72D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F1C0223D-8E9E-4BE4-AEA5-0CDE0CEE66DE}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F28264A2-917E-4D2A-A844-D8B410A1FC00}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F29E679D-3404-405B-A3FB-16F148F2082E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F2A20C0C-346B-4E85-8786-F1778B12E6A4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F3015958-D451-47ED-932D-FF336529EB19}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F31C7BF3-7582-4C88-87A1-B8734AFBDE40}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F338B0C8-8160-4502-A9FC-2416B982AAEC}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F33F2BF6-2B66-4BFB-83BB-4BE75343160C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F39BED18-01E5-4195-B1BD-D372E5F94A8D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F3A4156F-79A2-4292-8F65-D62DEBA14467}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F3B84A49-AFAC-49D7-A2E2-C07CAE020CC0}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F3BBFC54-ACD9-4477-B6D5-B3E8E19B955C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F420603E-9FFB-40F0-A668-515798D28E59}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F42DBE2F-9720-457A-8452-A98FB1256F6E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F49377AB-C3D5-4F5A-9EF4-90084FAE4402}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F4DD7725-4F92-4540-BCF9-00AC3FFC2630}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F4EDDB4E-C66A-4762-81F6-8AB94E5B1911}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F51D77E0-30FF-42AD-9CB1-ABCB4F58DF92}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F521F9CF-12C7-4C42-952D-E1F0725C4D20}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F544C97C-AA87-4FCE-9DDD-3865657ED8C6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F5564157-0094-4F25-B178-4B7C5B07CA0F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F58E7A50-0A24-41D9-AC17-CFF9D6128242}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F63C4BD3-E464-4F57-A689-90D0A967BC6B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F649D95D-44F6-459C-A20B-3764EF2A84D6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F64A549C-AB54-4D42-A80F-A69EDFE107E4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F6809169-369D-48D2-940D-FB630352B71E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F6A532BA-310E-436B-945B-4BE40B76FC05}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F6C6C2C0-3426-4BF3-8F84-E570401D1408}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F6E57DC1-F9E4-4049-B270-1CDC49302439}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7223F09-94F0-4CD1-BE49-8C2A02670C71}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7354ACA-2B9F-4355-974B-2BA6231B9CA8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7716E73-3655-4BF8-939D-582F788E299C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7C43C7F-8C1C-495E-BB87-0B3E35AA3093}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7E74417-5A7E-485D-8A67-6CACE4D9BE8E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7E9EB0D-3312-46CA-AD86-8C7A93BE06BA}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F7F70DBC-693C-4453-89DC-CEAA438C9E64}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F8170B0C-0D40-4E2D-B3CD-B8851FE6980C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F8428AFF-3E3D-43CA-9B26-4B2BED48F383}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F884A01E-2572-44EA-AA33-BFBD4B96ED04}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F8CB0FF4-778C-42F9-9406-DDC575116EE9}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F8E90B4A-539E-42A5-922C-53F5AA0CAED4}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F97D9752-0A09-42B4-A34A-A0382701157C}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{F9CA10DE-0E9F-4546-9802-2D333B11F199}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FA36B7E0-C5FF-4565-820B-1E9B3195A12B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FAA39A9A-CB15-476B-8F0C-BF650446C607}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FB07BF0B-34EC-4683-9F47-C3466B052D0F}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FB8E91C3-D57D-4B8F-96F2-EF255BE561DF}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FBEBD781-15EE-46C4-AEBE-F1B5361E6867}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FC9E6319-0134-4831-BCD3-089B769848A3}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FD13392B-5228-43DE-B736-A741E006935B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FD6180C1-E657-4E40-90A5-74E1B6FAA384}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FD9682CD-B77A-44FC-B64F-3C2C72BA57B6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FDC50E9F-C733-45D2-994C-A475B8989F7B}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FDC9D509-FEAF-4034-A735-C1396C186ED8}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FDCA29F6-198F-4716-A88E-5334631141EB}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FE1694D9-C5D9-49FB-9707-5D5316ED3607}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FE82315F-4B84-4D8C-BDE3-C4A9EB598149}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FEF6C7F4-2B04-4F03-B200-E9016BB9443D}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FF04213F-7165-4D37-84F7-4E35D86C092E}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FF294947-C7E6-4F5C-BE2E-1A344115D2C6}
Successfully deleted: [Empty Folder] C:\Users\John\appdata\local\{FF58DFD4-08F5-4930-B5CE-45413DB8B495}
Successfully deleted: [Folder] C:\Program Files\fixcleaner
Successfully deleted: [Folder] C:\Users\John\AppData\Roaming\fixcleaner
Successfully deleted: [Folder] C:\Windows\System32\ai_recyclebin

~~~ FireFox
Successfully deleted: [Folder] C:\Users\John\AppData\Roaming\mozilla\firefox\profiles\9nuorj5d.default\conduitcommon
Successfully deleted: [Folder] C:\Users\John\AppData\Roaming\mozilla\firefox\profiles\9nuorj5d.default\smartbar
Successfully deleted the following from C:\Users\John\AppData\Roaming\mozilla\firefox\profiles\9nuorj5d.default\prefs.js
user_pref(CT2154407.FF19Solved, true);
user_pref(CT2154407.FirstTime, true);
user_pref(CT2154407.FirstTimeFF3, true);
user_pref(CT2154407.UserID, UN42463455294493156);
user_pref(CT2154407.addressBarTakeOverEnabledInHidden, true);
user_pref(CT2154407.countryCode, US);
user_pref(CT2154407.defaultSearch, false);
user_pref(CT2154407.enableSearchFromAddressBar, true);
user_pref(CT2154407.firstTimeDialogOpened, true);
user_pref(CT2154407.fixPageNotFoundErrorByUser, TRUE);
user_pref(CT2154407.fixPageNotFoundErrorInHidden, true);
user_pref(CT2154407.fullUserID, UN42463455294493156.IN.20140131051425);
user_pref(CT2154407.installDate, 31/01/2014 05:14:32);
user_pref(CT2154407.installSessionId, 8BE13D10-0688-46AE-9DB8-BAC33882B360);
user_pref(CT2154407.installSp, true);
user_pref(CT2154407.installType, xpe);
user_pref(CT2154407.installUsage, 2014-01-31T13:18:52.3248863+03:00);
user_pref(CT2154407.installUsageEarly, 2014-01-31T13:18:49.2360071+03:00);
user_pref(CT2154407.installerVersion, 1.8.1.4);
user_pref(CT2154407.isCheckedStartAsHidden, true);
user_pref(CT2154407.isFirstTimeToolbarLoading, false);
user_pref(CT2154407.lastVersion, 10.23.0.822);
user_pref(CT2154407.openThankYouPage, true);
user_pref(CT2154407.openUninstallPage, true);
user_pref(CT2154407.revertSettingsEnabled, false);
user_pref(CT2154407.search.searchAppId, 128778451377431846);
user_pref(CT2154407.search.searchCount, 2);
user_pref(CT2154407.searchInNewTabEnabledByUser, false);
user_pref(CT2154407.searchInNewTabEnabledInHidden, true);
user_pref(CT2154407.searchRevert, false);
user_pref(CT2154407.searchSuggestEnabledByUser, true);
user_pref(CT2154407.searchUninstallUserMode, 4);
user_pref(CT2154407.searchUserMode, 4);
user_pref(CT2154407.serviceLayer_services_Configuration_lastUpdate, 1393785724241);
user_pref(CT2154407.serviceLayer_services_appTrackingFirstTime_lastUpdate, 1392979862480);
user_pref(CT2154407.serviceLayer_services_appsMetadata_lastUpdate, 1393785724379);
user_pref(CT2154407.serviceLayer_services_gottenAppsContextMenu_lastUpdate, 1393665211358);
user_pref(CT2154407.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate, 1391163517317);
user_pref(CT2154407.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate, 1391163520722);
user_pref(CT2154407.serviceLayer_services_login_10.23.0.722_lastUpdate, 1391250728873);
user_pref(CT2154407.serviceLayer_services_login_10.23.0.822_lastUpdate, 1393840134542);
user_pref(CT2154407.serviceLayer_services_otherAppsContextMenu_lastUpdate, 1393665211429);
user_pref(CT2154407.serviceLayer_services_searchAPI_lastUpdate, 1393785724341);
user_pref(CT2154407.serviceLayer_services_serviceMap_lastUpdate, 1393785724043);
user_pref(CT2154407.serviceLayer_services_toolbarContextMenu_lastUpdate, 1393785723527);
user_pref(CT2154407.serviceLayer_services_toolbarSettings_lastUpdate, 1393840135231);
user_pref(CT2154407.serviceLayer_services_translation_lastUpdate, 1393785723719);
user_pref(CT2154407.settingsINI, true);
user_pref(CT2154407.shouldFirstTimeDialog, false);
user_pref(CT2154407.startPage, false);
user_pref(CT2154407.toolbarBornServerTime, 31-1-2014);
user_pref(CT2154407.toolbarCurrentServerTime, 3-3-2014);
user_pref(CT2154407.toolbarDisabled, true);
user_pref(CT2154407.toolbarInstallDate, 31-01-2014 05:14:27);
user_pref(CT2154407.toolbarLoginClientTime, Fri Jan 31 2014 05:18:40 GMT-0500 (Eastern Standard Time));
user_pref(CT2154407.versionFromInstaller, 10.23.0.722);
user_pref(CT2154407.xpeMode, 1);
user_pref(CT2724386..clientLogIsEnabled, true);
user_pref(CT2724386.ALLOW_SHOWING_HIDDEN_TOOLBAR, false);
user_pref(CT2724386.BrowserCompStateIsOpen_129464706887642629, true);
user_pref(CT2724386.BrowserCompStateIsOpen_129681655908744368, true);
user_pref(CT2724386.CT2724407.CommunityChanged, true);
user_pref(CT2724386.CT2724407.alertChannelId, 1116673);
user_pref(CT2724386.CT2724431.CommunityChanged, true);
user_pref(CT2724386.CT2724431.alertChannelId, 1116697);
user_pref(CT2724386.CT2727162.CommunityChanged, true);
user_pref(CT2724386.CT2727162.alertChannelId, 1119424);
user_pref(CT2724386.CT2727622.CommunityChanged, true);
user_pref(CT2724386.CT2727622.alertChannelId, 1119884);
user_pref(CT2724386.CT2727646.CommunityChanged, true);
user_pref(CT2724386.CT2727646.alertChannelId, 1119908);
user_pref(CT2724386.CT2727678.CommunityChanged, true);
user_pref(CT2724386.CT2727678.alertChannelId, 1119940);
user_pref(CT2724386.CT2727750.CommunityChanged, true);
user_pref(CT2724386.CT2727750.alertChannelId, 1120012);
user_pref(CT2724386.CTID, CT2724386);
user_pref(CT2724386.CommunitiesChangesLastCheckTime, Mon Jan 16 2012 07:34:17 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.CommunityChanged, true);
user_pref(CT2724386.CurrentServerDate, 26-1-2012);
user_pref(CT2724386.DSInstall, true);
user_pref(CT2724386.DialogsAlignMode, LTR);
user_pref(CT2724386.DialogsGetterLastCheckTime, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.DownloadReferralCookieData, );
user_pref(CT2724386.FirstServerDate, 7-11-2011);
user_pref(CT2724386.FirstTime, true);
user_pref(CT2724386.FirstTimeFF3, true);
user_pref(CT2724386.FixPageNotFoundErrors, false);
user_pref(CT2724386.GroupingLastCheckTime, Mon Jan 16 2012 07:34:17 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.GroupingLastErrorCode, );
user_pref(CT2724386.GroupingLastResponse, true);
user_pref(CT2724386.GroupingLastServerUpdateTime, 129707049990000000);
user_pref(CT2724386.GroupingServerCheckInterval, 1440);
user_pref(CT2724386.HPInstall, false);
user_pref(CT2724386.HasUserGlobalKeys, true);
user_pref(CT2724386.HomePageProtectorEnabled, false);
user_pref(CT2724386.HomepageBeforeUnload, hxxp://co103w.col103.mail.live.com/default.aspx?wa=wsignin1.0);
user_pref(CT2724386.Initialize, true);
user_pref(CT2724386.InitializeCommonPrefs, true);
user_pref(CT2724386.InstallationAndCookieDataSentCount, 3);
user_pref(CT2724386.InstalledDate, Mon Nov 07 2011 09:36:03 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.InvalidateCache, false);
user_pref(CT2724386.IsAlertDBUpdated, true);
user_pref(CT2724386.IsGrouping, false);
user_pref(CT2724386.IsInitSetupIni, true);
user_pref(CT2724386.IsMulticommunity, false);
user_pref(CT2724386.IsOpenThankYouPage, false);
user_pref(CT2724386.IsOpenUninstallPage, true);
user_pref(CT2724386.LanguagePackLastCheckTime, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.LanguagePackReloadIntervalMM, 1440);
user_pref(CT2724386.LastLogin_3.7.0.6, Thu Dec 01 2011 18:33:08 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.LastLogin_3.8.0.8, Mon Jan 16 2012 07:34:20 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.LastLogin_3.8.1.0, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.LatestVersion, 3.8.1.0);
user_pref(CT2724386.Locale, en);
user_pref(CT2724386.MCDetectTooltipHeight, 83);
user_pref(CT2724386.MCDetectTooltipShow, false);
user_pref(CT2724386.MCDetectTooltipUrl, hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1);
user_pref(CT2724386.MCDetectTooltipWidth, 295);
user_pref(CT2724386.MyStuffEnabledAtInstallation, true);
user_pref(CT2724386.OriginalFirstVersion, 3.7.0.6);
user_pref(CT2724386.RadioIsPodcast, false);
user_pref(CT2724386.RadioLastCheckTime, Mon Nov 07 2011 09:36:06 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.RadioLastUpdateIPServer, 3);
user_pref(CT2724386.RadioLastUpdateServer, 129249036863500000);
user_pref(CT2724386.RadioMediaID, 21080102);
user_pref(CT2724386.RadioMediaType, Media Player);
user_pref(CT2724386.RadioMenuSelectedID, EBRadioMenu_CT272438621080102);
user_pref(CT2724386.RadioShrinkedFromSetup, false);
user_pref(CT2724386.RadioStationName, Mix%201620%20Am);
user_pref(CT2724386.RadioStationURL, hxxp://69.115.65.9:8000);
user_pref(CT2724386.SearchEngineBeforeUnload, MyStart Search);
user_pref(CT2724386.SearchFromAddressBarIsInit, true);
user_pref(CT2724386.SearchInNewTabEnabled, true);
user_pref(CT2724386.SearchInNewTabIntervalMM, 1440);
user_pref(CT2724386.SearchInNewTabLastCheckTime, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.SearchInNewTabUserEnabled, false);
user_pref(CT2724386.SearchProtectorEnabled, false);
user_pref(CT2724386.SearchProtectorToolbarDisabled, false);
user_pref(CT2724386.SendProtectorDataViaLogin, true);
user_pref(CT2724386.ServiceMapLastCheckTime, Thu Jan 26 2012 13:33:12 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.SettingsLastCheckTime, Thu Jan 26 2012 13:33:04 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.SettingsLastUpdate, 1326891976);
user_pref(CT2724386.ThirdPartyComponentsInterval, 504);
user_pref(CT2724386.ThirdPartyComponentsLastCheck, Mon Jan 16 2012 07:34:17 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.ThirdPartyComponentsLastUpdate, 1312887586);
user_pref(CT2724386.ToolbarShrinkedFromSetup, false);
user_pref(CT2724386.UserID, UN91609452235252789);
user_pref(CT2724386.ValidationData_Toolbar, 2);
user_pref(CT2724386.WeatherNetwork, );
user_pref(CT2724386.WeatherPollDate, Thu Jan 26 2012 13:33:05 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.WeatherUnit, F);
user_pref(CT2724386.alertChannelId, 1116652);
user_pref(CT2724386.approveUntrustedApps, false);
user_pref(CT2724386.backendstorage./9b+7e+x305, 247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B
user_pref(CT2724386.backendstorage./9b+7e,x305, 247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B
user_pref(CT2724386.backendstorage./9b+7e-x305, 247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D
user_pref(CT2724386.backendstorage./9b+7e.:2z527, 2423);
user_pref(CT2724386.backendstorage./9b+7e.x305, 247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D6850
user_pref(CT2724386.backendstorage./9b+7e/x305, 247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A66
user_pref(CT2724386.backendstorage./9b+7e06cg5el8:, 6E6D6F6B6D74736E7472);
user_pref(CT2724386.backendstorage./9b+7e06cg5el;8i:k, 247E2D2F226A74737571737A79747A78242F4B49474F42357D5D5C3D);
user_pref(CT2724386.backendstorage./9b+7e0x305, 247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D
user_pref(CT2724386.backendstorage./9b+7e1x305, 247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A49
user_pref(CT2724386.backendstorage./9b+7e2x305, 247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D
user_pref(CT2724386.backendstorage./9b+7e31;cjej~j?b, 247E61393F236B25717778752A212C6E414F444D327A3451562B564B4E3B323D205D524D5550534D462F4875784B424D306D705E523B544642574E
user_pref(CT2724386.backendstorage./9b+7e3x305, 247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A
user_pref(CT2724386.backendstorage./9b+7e4x305, 247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B
user_pref(CT2724386.backendstorage./9b+7e5x305, 247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B
user_pref(CT2724386.backendstorage./9b+7e6x305, 247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D
user_pref(CT2724386.backendstorage./9b+7e7x305, 247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745445159575B504B504B4D5E545553533A655A5D4A334C3C3B3A395148536775636367757567
user_pref(CT2724386.backendstorage./9b+7e8x305, 247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B
user_pref(CT2724386.backendstorage./9b+7e9x305, 247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A43
user_pref(CT2724386.backendstorage./9b+7e:x305, 247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68
user_pref(CT2724386.backendstorage./9b+7e;x305, 247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A72
user_pref(CT2724386.backendstorage./9b+7e<x305, 247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A47
user_pref(CT2724386.backendstorage./9b+7e=x305, 247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D
user_pref(CT2724386.backendstorage./9b+7e>x305, 247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A51
user_pref(CT2724386.backendstorage./9b+7e?x305, 247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F67757868
user_pref(CT2724386.backendstorage./9b+7e@x305, 247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C44
user_pref(CT2724386.backendstorage./9b+7eax305, 247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C78
user_pref(CT2724386.backendstorage./9b+7ebe3g=;d9n9=d, 372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57);
user_pref(CT2724386.backendstorage./9b+7ebx305, 247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D73
user_pref(CT2724386.backendstorage./9b+7ecx305, 247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B48
user_pref(CT2724386.backendstorage./9b+7edx305, 247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D
user_pref(CT2724386.backendstorage./9b+7etx305, 247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F
user_pref(CT2724386.backendstorage./9b-0?3g>d, 6F6B706E727144447A6F46487220474B4E4D257C217B7C2A23282522272B5C2C285F2B2E);
user_pref(CT2724386.backendstorage./9b-0?3g@6:5;, );
user_pref(CT2724386.backendstorage./9b-0?3gfa7ef, 2B2E2C3D);
user_pref(CT2724386.backendstorage./9b-3=3eccja=f>, 247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232C2F30313237425C6453685A64536C56685C5C676264523B6F756B65745D
user_pref(CT2724386.backendstorage./9b/>01=9a6k6<im;krie@pdawm, 6A696B7273747576);
user_pref(CT2724386.backendstorage./9b3=>@44i48?, 372C2D32697576334236334148477B213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750);
user_pref(CT2724386.backendstorage./9b5ba==9cjag, 3D6D6B6F6C3E73427A7675777A757D4C787A7C4C50);
user_pref(CT2724386.backendstorage./9b6b11g4c56b>f;p;anr@p, 6E6D6F6B6D74736F6E6F727572);
user_pref(CT2724386.backendstorage./9b9643g3/9e, 6A);
user_pref(CT2724386.backendstorage./9b<:222h64<, 393F352F3E);
user_pref(CT2724386.backendstorage./9b=+03eh8h8j?:, 4443);
user_pref(CT2724386.backendstorage./9b?+e2a52d8, 372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52);
user_pref(CT2724386.backendstorage./9b?b0d:8aj62<h, 6D);
user_pref(CT2724386.backendstorage./9ba@0<0bi6a7gn:6@l?, 6E6B);
user_pref(CT2724386.backendstorage.hxxp://api16_thetrafficstat_net.pid2, 36383264663933646566323638613766);
user_pref(CT2724386.backendstorage.hxxp://api18_thetrafficstat_net.pid2, 36383264663933646566323638613766);
user_pref(CT2724386.backendstorage.hxxp://api19_thetrafficstat_net.pid2, 36383264663933646566323638613766);
user_pref(CT2724386.backendstorage.hxxp://api21_thetrafficstat_net.pid2, 36383264663933646566323638613766);
user_pref(CT2724386.components.1000082, false);
user_pref(CT2724386.components.129248963349915487, false);
user_pref(CT2724386.components.129248964061947202, true);
user_pref(CT2724386.components.129248964422728031, false);
user_pref(CT2724386.components.129464706887642629, false);
user_pref(CT2724386.globalFirstTimeInfoLastCheckTime, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.homepageProtectorEnableByLogin, true);
user_pref(CT2724386.initDone, true);
user_pref(CT2724386.isAppTrackingManagerOn, true);
user_pref(CT2724386.isFirstRadioInstallation, false);
user_pref(CT2724386.myStuffEnabled, true);
user_pref(CT2724386.myStuffPublihserMinWidth, 400);
user_pref(CT2724386.myStuffServiceIntervalMM, 1440);
user_pref(CT2724386.oldAppsList, 129248961427290040,129248961427290041,111,129713655163493729,129681805661586396,129682450357013079,1000082,129248964422728031,1294647068876
user_pref(CT2724386.revertSettingsEnabled, false);
user_pref(CT2724386.searchProtectorDialogDelayInSec, 10);
user_pref(CT2724386.searchProtectorEnableByLogin, true);
user_pref(CT2724386.testingCtid, );
user_pref(CT2724386.toolbarAppMetaDataLastCheckTime, Thu Jan 26 2012 13:33:14 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.toolbarContextMenuLastCheckTime, Mon Jan 16 2012 07:34:20 GMT-0500 (Eastern Standard Time));
user_pref(CT2724386.usagesFlag, 2);
user_pref(valueApps.CT2154407./9B+7E+x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E,x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E-x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E.:2z527.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E.x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E/x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E06CG5EL8:, 6E6D686F6B7075757370);
user_pref(valueApps.CT2154407./9B+7E06CG5EL8:.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E06CG5EL;8I:K, 247E2D2F226A74736E7571767B7B7976242F4B49474F42357D5D5C3D);
user_pref(valueApps.CT2154407./9B+7E06CG5EL;8I:K.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E0x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E1x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E2x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ3J@@M=<$ODG.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ7FK;KG#8QKEF)TIL.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ7FK;KG#NCEP@MC+VKN.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ7J?:9AI$ODG.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ:<E>!LAD.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ:F8GB@9$ODG.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJ<28DAJ=$ODG, 247E61393F236B256E7372782A212C6E414F444D327A34483E44504D5649305B5053403742256257525A5558524B344D7A7D504752357275635740
user_pref(valueApps.CT2154407./9B+7E31;CJ<28DAJ=$ODG.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E31;CJ>?JHMA#NCF.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJB;~J?B.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJB<?HJJ@B>&QFI.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJE5EL!LAD, 247E61393F236B25767175712A212C6E414F444D327A34514151582D584D503D343F225F544F5752554F48314A777A4D444F326F7260543D564842595
user_pref(valueApps.CT2154407./9B+7E31;CJE5EL!LAD.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E31;CJE89H@;GPFRDEUESM-XMP.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJEIK4!LAD.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJEJ~J?B.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJF6@8:G<?QOKGO*UJM.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJF97F;AF:AAGES,WLO, 247E61393F236B257573787A752B222D6F4250454E337B355346445348474D4E53474E4E5452603964595C49404B2E6B6E5C5039523E54
user_pref(valueApps.CT2154407./9B+7E31;CJF97F;AF:AAGES,WLO.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E31;CJG=G9!LAD, 247E61393F236B256E747329202B6D404E434C317933524852442C574C4F3C333E214D4E57432C4534473E49565A614D365550606E6D543D565D68657
user_pref(valueApps.CT2154407./9B+7E31;CJG=G9!LAD.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7E31;CJHB>F!LAD.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJI5E K@C.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E31;CJI>K3?A#NCF.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E3x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E4x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E5x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E6x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E7x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E8x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E9x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E:x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E;x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E<x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E=x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E>x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E?x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7E@x305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7EAx305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7EBE3G=;D9N9=D, 372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57);
user_pref(valueApps.CT2154407./9B+7EBE3G=;D9N9=D.storedInFile, false);
user_pref(valueApps.CT2154407./9B+7EBx305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7ECx305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7EDx305.storedInFile, true);
user_pref(valueApps.CT2154407./9B+7Etx305.storedInFile, true);
user_pref(valueApps.CT2154407./9B-0?3G>D, 3A673D6C717174757A714546762048794D4A25794E4F222A205728262525265D5D5A5C2B);
user_pref(valueApps.CT2154407./9B-0?3G>D.storedInFile, false);
user_pref(valueApps.CT2154407./9B-0?3G@6:5;, );
user_pref(valueApps.CT2154407./9B-0?3G@6:5;.storedInFile, false);
user_pref(valueApps.CT2154407./9B-0?3GFA7EF, 2B2E2C3D);
user_pref(valueApps.CT2154407./9B-0?3GFA7EF.storedInFile, false);
user_pref(valueApps.CT2154407./9B-3=3ECCJA=F>, 247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697
user_pref(valueApps.CT2154407./9B-3=3ECCJA=F>.storedInFile, false);
user_pref(valueApps.CT2154407./9B/>01=9A6K6<IM;KRIE@PDAWM, 6A696B7273747576);
user_pref(valueApps.CT2154407./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile, false);
user_pref(valueApps.CT2154407./9B3=>@44I48?, 372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F);
user_pref(valueApps.CT2154407./9B3=>@44I48?.storedInFile, false);
user_pref(valueApps.CT2154407./9B5BA==9CJAG, 683F706D3D7342767A76747473477C787A4D214F7E);
user_pref(valueApps.CT2154407./9B5BA==9CJAG.storedInFile, false);
user_pref(valueApps.CT2154407./9B6B11G4C56B>F;P;ANR@P, 6E6D686F6B7075757370717579);
user_pref(valueApps.CT2154407./9B6B11G4C56B>F;P;ANR@P.storedInFile, false);
user_pref(valueApps.CT2154407./9B90E@.3C;7B=?OFB>>RHIQS, 393F352F3E);
user_pref(valueApps.CT2154407./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile, false);
user_pref(valueApps.CT2154407./9B9643G3/9E, 6A);
user_pref(valueApps.CT2154407./9B9643G3/9E.storedInFile, false);
user_pref(valueApps.CT2154407./9B;45>:BI9I7IE, 2B2E2C3D);
user_pref(valueApps.CT2154407./9B;45>:BI9I7IE.storedInFile, false);
user_pref(valueApps.CT2154407./9B<:222H64<, 393F352F3E);
user_pref(valueApps.CT2154407./9B<:222H64<.storedInFile, false);
user_pref(valueApps.CT2154407./9B<:222H64<L8DAJ, 6D70706E7674747974772A797B727C75752022);
user_pref(valueApps.CT2154407./9B<:222H64<L8DAJ.storedInFile, false);
user_pref(valueApps.CT2154407./9B=+03EH8H8J?:, 4443);
user_pref(valueApps.CT2154407./9B=+03EH8H8J?:.storedInFile, false);
user_pref(valueApps.CT2154407./9B?+E2A52D8, 372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52);
user_pref(valueApps.CT2154407./9B?+E2A52D8.storedInFile, false);
user_pref(valueApps.CT2154407./9B?B0D:8AJ62<H, 6D);
user_pref(valueApps.CT2154407./9B?B0D:8AJ62<H.storedInFile, false);
user_pref(valueApps.CT2154407./9BA@0<0BI6A7GN:6@L?, 6C);
user_pref(valueApps.CT2154407./9BA@0<0BI6A7GN:6@L?.storedInFile, false);
user_pref(valueApps.CT2154407.PG_ENABLE, 74727565);
user_pref(valueApps.CT2154407.PG_ENABLE.storedInFile, false);
user_pref(valueApps.CT2154407.SF_JUST_INSTALLED, 46414C5345);
user_pref(valueApps.CT2154407.SF_JUST_INSTALLED.storedInFile, false);
user_pref(valueApps.CT2154407.SF_STATUS, 454E41424C4544);
user_pref(valueApps.CT2154407.SF_STATUS.storedInFile, false);
user_pref(valueApps.CT2154407.SF_USER_ID, 6369645F33313132303134353138343932323537323930);
user_pref(valueApps.CT2154407.SF_USER_ID.storedInFile, false);
user_pref(valueApps.CT2154407._key_cl_active, 62313731333732322D306431392D346132312D396335642D383435323663366366356563);
user_pref(valueApps.CT2154407._key_cl_active.storedInFile, false);
user_pref(valueApps.CT2154407.cb_experience_000, 3337);
user_pref(valueApps.CT2154407.cb_experience_000.storedInFile, false);
user_pref(valueApps.CT2154407.cb_firstuse0100, 31);
user_pref(valueApps.CT2154407.cb_firstuse0100.storedInFile, false);
user_pref(valueApps.CT2154407.cb_user_id_000, 43423436353136373634343334375F313339313630313535383133335F46697265666F78);
user_pref(valueApps.CT2154407.cb_user_id_000.storedInFile, false);
user_pref(valueApps.CT2154407.cbfirsttime, 467269204A616E20333120323031342030353A31383A353020474D542D3035303020284561737465726E205374616E646172642054696D6529);
user_pref(valueApps.CT2154407.cbfirsttime.storedInFile, false);
user_pref(valueApps.CT2154407.impression_session_counter, 3238);
user_pref(valueApps.CT2154407.impression_session_counter.storedInFile, false);
user_pref(valueApps.CT2154407.impression_session_id, 2266653936663033662D663666312D343664332D393432362D62346133396339363539656422);
user_pref(valueApps.CT2154407.impression_session_id.storedInFile, false);
user_pref(valueApps.CT2154407.impression_session_last_active, 31333933383031353939383836);
user_pref(valueApps.CT2154407.impression_session_last_active.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appStateReportTime, 31333933383430313430343038);
user_pref(valueApps.CT2154407.mam_gk_appStateReportTime.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_Clarity_Active, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_Clarity_Active.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_CouponBuddy, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_CouponBuddy.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_Discover_Apps, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_Discover_Apps.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_Easytobook, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_Easytobook.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_Easytobook_targeted, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_Easytobook_targeted.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_Find-a-Pro, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_Find-a-Pro.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_JobsMiner, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_JobsMiner.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_PriceGong, 6F6E);
user_pref(valueApps.CT2154407.mam_gk_appState_PriceGong.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appState_WindowShopper, 6F6666);
user_pref(valueApps.CT2154407.mam_gk_appState_WindowShopper.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_appsConfig.storedInFile, true);
user_pref(valueApps.CT2154407.mam_gk_appsDefaultEnabled, 6E756C6C);
user_pref(valueApps.CT2154407.mam_gk_appsDefaultEnabled.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_calledSetupService, 31);
user_pref(valueApps.CT2154407.mam_gk_calledSetupService.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_currentBadgeValue, 31);
user_pref(valueApps.CT2154407.mam_gk_currentBadgeValue.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_currentVersion, 312E31332E302E3137);
user_pref(valueApps.CT2154407.mam_gk_currentVersion.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_eventsCache, 7B2266633737356461372D366334662D343535652D383461322D386133336462306265383237223A7B22746F706963223A227265717565737453657474
user_pref(valueApps.CT2154407.mam_gk_eventsCache.storedInFile, true);
user_pref(valueApps.CT2154407.mam_gk_existingUsersRecoveryDone, 31);
user_pref(valueApps.CT2154407.mam_gk_existingUsersRecoveryDone.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_first_time, 31);
user_pref(valueApps.CT2154407.mam_gk_first_time.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_lastLoginTime, 31333933383430313431323333);
user_pref(valueApps.CT2154407.mam_gk_lastLoginTime.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_lastSettingsOpen, 7B2273657474696E67735061676546756C6C55726C223A22687474703A2F2F6170702E6D616D2E636F6E647569742E636F6D2F6765746170702F7
user_pref(valueApps.CT2154407.mam_gk_lastSettingsOpen.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_localization.storedInFile, true);
user_pref(valueApps.CT2154407.mam_gk_mamEnabled, 74727565);
user_pref(valueApps.CT2154407.mam_gk_mamEnabled.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_migrated_from_ls, 31);
user_pref(valueApps.CT2154407.mam_gk_migrated_from_ls.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_newApps, 5B5D);
user_pref(valueApps.CT2154407.mam_gk_newApps.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_new_welcome_experience, 31);
user_pref(valueApps.CT2154407.mam_gk_new_welcome_experience.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_settings1.12.0.5.storedInFile, true);
user_pref(valueApps.CT2154407.mam_gk_settings1.13.0.17.storedInFile, true);
user_pref(valueApps.CT2154407.mam_gk_showWelcomeGadget, 66616C7365);
user_pref(valueApps.CT2154407.mam_gk_showWelcomeGadget.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_stamp, 313034335F30);
user_pref(valueApps.CT2154407.mam_gk_stamp.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_userBornDate, 4E2F41);
user_pref(valueApps.CT2154407.mam_gk_userBornDate.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_userId, 62313936333039382D323233332D343761332D623664622D306431303036363463313230);
user_pref(valueApps.CT2154407.mam_gk_userId.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_user_approval_interacted, 31);
user_pref(valueApps.CT2154407.mam_gk_user_approval_interacted.storedInFile, false);
user_pref(valueApps.CT2154407.mam_gk_welcomeDialogMode, 31);
user_pref(valueApps.CT2154407.mam_gk_welcomeDialogMode.storedInFile, false);
user_pref(valueApps.CT2154407.rematchGround-country-code, 22555322);
user_pref(valueApps.CT2154407.rematchGround-country-code.storedInFile, false);
user_pref(valueApps.CT2154407.rematchGround.upstairs, 7B22687474703A2F2F66617374636F6E74656E742E636F6E647569742E636F6D2F646F776E6C6F61645F6F66666572732E68746D6C3F637469643D
user_pref(valueApps.CT2154407.rematchGround.upstairs.storedInFile, false);
user_pref(valueApps.CT2154407.rematchagent-is-test-user, 66616C7365);
user_pref(valueApps.CT2154407.rematchagent-is-test-user.storedInFile, false);
user_pref(valueApps.CT2154407.rematchagent-matkot-user-id, 22313339313136333534393031373237323334353622);
user_pref(valueApps.CT2154407.rematchagent-matkot-user-id.storedInFile, false);
user_pref(valueApps.CT2154407.rematchagent-periodic-reports, 7B2270696E675F30223A5B313339333834303134333436322C31343430303030305D7D);
user_pref(valueApps.CT2154407.rematchagent-periodic-reports.storedInFile, false);
user_pref(valueApps.CT2154407.rematchagent-user-id, 2263313665626362362D626139362D343663392D386232382D38646565376632393435363322);
user_pref(valueApps.CT2154407.rematchagent-user-id.storedInFile, false);
user_pref(valueApps.CT2154407.url_history0001, 687474703A2F2F7777772E706F676F2E636F6D2F67616D65732F686172766573743F7061676553656374696F6E3D63705F68705F7765656B5F62746E5F315
user_pref(valueApps.CT2154407.url_history0001.storedInFile, true);
user_pref(valueApps.storage.mam_gk_userId, 62313936333039382D323233332D343761332D623664622D306431303036363463313230);
Emptied folder: C:\Users\John\AppData\Roaming\mozilla\firefox\profiles\9nuorj5d.default\minidumps [3 files]

~~~ Chrome

[C:\Users\John\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\John\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\John\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\John\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 05/29/2015 at 4:28:04.23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Corrine]

Thank you, John.

That was quite a collection that had been accumulated which didn't show in the logs. Still with all that, the only reference to a scanner I'm seeing is in installed programs:

Neat
Neat ADF Scanner 2008 Driver
Neat ADF Scanner Driver
Neat Core Files
Neat Mobile Scanner (Silver) Driver
Neat Mobile Scanner 2008 Driver
Neat Mobile Scanner Driver
NeatConnect Scanner Driver

Let's see what FRST shows. Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
• Press Scan button.
• The first time it is run, it will produce two logs in the same directory the tool is run from -- FRST.txt and (Addition.txt.
• Please copy/paste both logs in your reply.

What other problems are you having with the computer?

 

[john19303]

I had meant to delete the Neat scanner and associated files. I am using it only on my Win 8 computer. Besides the HP Print and Scan Doctor program I would like to have a clean sfc /scannow. Now it shows I have corrupted Resource Files and cannot be repaired. Here are the two files from FRST:


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by John (administrator) on JOHN-PC on 29-05-2015 19:48:07
Running from C:\Users\John\Desktop
Loaded Profiles: John (Available Profiles: John & Administrator & Classic .NET AppPool)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Apple Inc.) C:\Program Files\QuickTime\QTTask.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Foxit Software Inc.) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Seagate Technology LLC) C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
(Microsoft Corporation) C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
() C:\Windows\System32\SecUPDUtilSvc.exe
(Seagate Technology LLC) C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Seagate Technology LLC) C:\Program Files\Seagate\Seagate Dashboard 2.0\MobileService.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-13] (Avast Software s.r.o.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-06-11] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [351968 2014-09-08] ()
HKLM\...\Run: [DBAgent] => C:\Program Files\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1533728 2015-04-01] (Seagate Technology LLC)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\Run: [Uploader] => C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [127304 2015-04-01] (Seagate Technology LLC)
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\Run: [OneDrive] => C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe [382664 2015-05-23] (Microsoft Corporation)
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\Run: [RoboForm] => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-05-02] (Siber Systems)
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [221184 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll [2015-05-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll [2015-05-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll [2015-05-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-26] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-04-28] (Google)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = msn
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = msn
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=U218DHP&pc=U218
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-05-02] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-02] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-02] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-05-02] (Siber Systems Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Toolbar: HKU\S-1-5-21-2516008890-62740797-1088872154-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-2516008890-62740797-1088872154-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-05] (Google Inc.)
Toolbar: HKU\S-1-5-21-2516008890-62740797-1088872154-1001 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-05-02] (Siber Systems Inc.)
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
FireFox:
========
FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default
FF DefaultSearchUrl: hxxp://www.bing.com/search
FF SearchEngineOrder.1: Microsoft (Bing)
FF SelectedSearchEngine: Microsoft (Bing)
FF Homepage: hxxp://www.msn.com/
FF Keyword.URL: hxxp://www.bing.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-26] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2013-12-18] ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2014-11-18] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2014-11-18] (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-02] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @palmsource.com/installer,version=1.0 -> C:\PROGRA~1\palmOne\PACKAG~1\NPInstal.dll [2007-03-19] ()
FF Plugin: @siber.com/RoboForm -> C:\Program Files\Siber Systems\AI RoboForm\chrome\plugin\np-rf-plugin.dll [2015-05-02] (Siber Systems Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-23] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-12-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-12-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-12-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-12-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-12-06] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2010-12-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2010-12-14] (Apple Inc.)
FF SearchPlugin: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\searchplugins\bing-avast.xml [2014-06-07]
FF SearchPlugin: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\searchplugins\yahoo-avast.xml [2014-10-04]
FF Extension: Blur (Formerly DoNotTrackMe) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\Extensions\donottrackplus@abine.com [2014-11-22]
FF Extension: Flash and Video Download - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\9nuorj5d.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2015-05-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-02-01]
FF HKLM\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2013-01-21]
FF HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox
Chrome:
=======
CHR Profile: C:\Users\John\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-02]
CHR Extension: (Avast Online Security) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-18]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-05]
CHR Extension: (Google Wallet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (RoboForm) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-03-15]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-03-15]
Opera:
=======
OPR Extension: (RoboForm) - C:\Program Files\Siber Systems\AI RoboForm\Opera [2013-10-29]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-06-11] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-26] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-04-26] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-04-26] (Avast Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244448 2014-10-28] (Foxit Software Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [2589136 2015-02-23] (Paramount Software UK Ltd)
S3 Samsung UPD Service; C:\Windows\System32\SUPDSvc.exe [131888 2012-01-05] (Samsung Electronics CO., LTD.)
R2 SamsungUPDUtilSvc; C:\Windows\system32\SecUPDUtilSvc.exe [118576 2014-11-26] ()
R2 Seagate Dashboard Services; C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16216 2015-02-13] (Seagate Technology LLC)
R2 Seagate MobileBackup Service; C:\Program Files\Seagate\Seagate Dashboard 2.0\MobileService.exe [157992 2015-04-01] (Seagate Technology LLC)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 amacpi; C:\Windows\System32\DRIVERS\null.sys [4608 2009-07-13] (Microsoft Corporation)
R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-26] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26096 2015-04-26] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-04-26] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [271248 2015-04-26] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-04-26] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427992 2015-04-26] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-26] (Avast Software s.r.o.)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38472 2013-11-01] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-04-26] ()
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-02] (Samsung Electronics Co., Ltd.) [File not signed]
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-04-14] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-29] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2012-01-04] ()
R1 NetworkX; C:\Windows\system32\ckldrv.sys [19584 2008-03-17] () [File not signed]
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [21792 2011-04-13] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-05-29] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
S3 PalmUSBD; C:\Windows\System32\drivers\PalmUSBD.sys [16640 2007-12-04] (PalmSource, Inc.)
R0 pssnap; C:\Windows\System32\DRIVERS\pssnap.sys [16016 2015-04-10] (Windows (R) Win 7 DDK provider)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [629760 2010-08-10] (Realtek Semiconductor Corporation )
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2014-05-07] (Samsung Electronics) [File not signed]
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [File not signed]
S3 USBMULCD; C:\Windows\System32\drivers\CM106.sys [1515520 2009-10-20] (C-Media Electronics Inc)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-04-26] (Avast Software)
S3 catchme; \??\C:\Users\John\AppData\Local\Temp\catchme.sys [X]
S3 MREMP50; \??\C:\Program Files\Common Files\Motive\MREMP50.sys [X]
S3 MRESP50; \??\C:\Program Files\Common Files\Motive\MRESP50.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S0 vmci; system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-29 19:48 - 2015-05-29 19:48 - 00023421 _____ () C:\Users\John\Desktop\FRST.txt
2015-05-29 19:46 - 2015-05-29 19:48 - 00000000 ____D () C:\FRST
2015-05-29 19:46 - 2015-05-29 19:46 - 01147392 _____ (Farbar) C:\Users\John\Desktop\FRST.exe
2015-05-29 13:35 - 2015-05-29 13:35 - 00000000 ___HD () C:\OneDriveTemp
2015-05-29 13:15 - 2015-05-29 13:15 - 00003979 _____ () C:\Windows\NeatUninstall.LOG
2015-05-29 07:35 - 2015-05-29 07:35 - 00043647 _____ () C:\Users\John\Desktop\ComboFix.txt
2015-05-29 07:35 - 2015-05-29 07:35 - 00015503 _____ () C:\Users\John\Desktop\AdwCleaner[S0].txt
2015-05-29 05:06 - 2015-05-29 05:06 - 00043647 _____ () C:\ComboFix.txt
2015-05-29 04:36 - 2011-06-26 02:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-29 04:36 - 2010-11-07 13:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-29 04:36 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-29 04:36 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-29 04:36 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-29 04:36 - 2000-08-30 20:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-29 04:36 - 2000-08-30 20:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-29 04:36 - 2000-08-30 20:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-29 04:35 - 2015-05-29 05:06 - 00000000 ____D () C:\Qoobox
2015-05-29 04:35 - 2015-05-29 05:04 - 00000000 ____D () C:\Windows\erdnt
2015-05-29 04:34 - 2015-05-29 04:34 - 05628678 ____R (Swearware) C:\Users\John\Desktop\ComboFix.exe
2015-05-29 04:28 - 2015-05-29 04:28 - 00132252 _____ () C:\Users\John\Desktop\JRT.txt
2015-05-29 04:23 - 2015-05-29 04:23 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-JOHN-PC-Windows-7-Professional-(32-bit).dat
2015-05-29 04:23 - 2015-05-29 04:23 - 00000000 ____D () C:\RegBackup
2015-05-29 04:09 - 2015-05-29 04:09 - 02947193 _____ (Thisisu) C:\Users\John\Desktop\JRT.exe
2015-05-29 03:45 - 2015-05-29 03:55 - 00000000 ____D () C:\AdwCleaner
2015-05-29 03:43 - 2015-05-29 03:43 - 02223104 _____ () C:\Users\John\Desktop\adwcleaner_4.205.exe
2015-05-26 14:45 - 2015-05-26 14:45 - 00279341 _____ () C:\Users\John\Documents\Belarc Advisor Security Benchmark Summary.htm
2015-05-26 14:45 - 2015-05-26 14:45 - 00000000 ____D () C:\Users\John\Documents\Belarc Advisor Security Benchmark Summary_files
2015-05-26 14:19 - 2015-05-27 15:37 - 00000928 _____ () C:\Users\John\Documents\Sysnative XP to VISTA.txt
2015-05-26 13:44 - 2015-05-26 13:44 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\John\Downloads\flashplayer17_ha_install.exe
2015-05-25 16:08 - 2015-05-25 16:08 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-25 14:29 - 2015-05-25 14:29 - 00002783 _____ () C:\Windows\IE11_main.log
2015-05-25 07:13 - 2015-05-25 07:13 - 00688992 ____R (Swearware) C:\Users\John\Desktop\dds.com
2015-05-23 19:11 - 2015-04-10 23:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-05-23 19:06 - 2015-05-23 19:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-23 18:49 - 2015-05-29 13:34 - 00663712 _____ () C:\Windows\setupact.log
2015-05-23 18:49 - 2015-05-23 18:49 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-23 18:48 - 2015-05-29 13:34 - 00000810 _____ () C:\Windows\errord.log
2015-05-23 18:48 - 2015-05-29 13:21 - 00004398 _____ () C:\Windows\PFRO.log
2015-05-14 07:28 - 2015-05-14 07:30 - 191057304 _____ () C:\Users\John\Downloads\setup_full_G3010_140_052.exe
2015-05-14 07:22 - 2015-05-29 03:33 - 00068096 ___SH () C:\Users\John\Desktop\Thumbs.db
2015-05-13 05:36 - 2015-05-29 17:18 - 00423267 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 04:32 - 2015-05-01 09:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 04:10 - 2015-05-04 21:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 04:10 - 2015-04-21 21:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 04:10 - 2015-04-21 12:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 04:10 - 2015-04-21 12:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 04:10 - 2015-04-21 12:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 04:10 - 2015-04-21 12:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 04:10 - 2015-04-21 12:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 04:10 - 2015-04-21 12:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 04:10 - 2015-04-21 12:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 04:10 - 2015-04-21 12:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 04:10 - 2015-04-21 12:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 04:10 - 2015-04-21 12:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 04:10 - 2015-04-21 12:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 04:10 - 2015-04-21 12:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 04:10 - 2015-04-21 11:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 04:10 - 2015-04-21 11:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 04:10 - 2015-04-21 11:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 04:10 - 2015-04-21 11:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 04:10 - 2015-04-21 11:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 04:10 - 2015-04-21 11:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 04:10 - 2015-04-21 11:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 04:10 - 2015-04-21 11:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 04:10 - 2015-04-21 11:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 04:10 - 2015-04-21 11:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 04:10 - 2015-04-21 11:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 04:10 - 2015-04-21 11:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 04:10 - 2015-04-21 11:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 04:10 - 2015-04-21 11:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 04:10 - 2015-04-21 11:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 04:10 - 2015-04-21 11:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 04:10 - 2015-04-21 11:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 04:10 - 2015-04-21 10:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 04:10 - 2015-04-21 10:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 04:10 - 2015-04-19 22:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 04:10 - 2015-04-19 22:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 04:10 - 2015-04-19 22:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 04:10 - 2015-04-17 22:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 04:09 - 2015-04-12 23:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 04:09 - 2015-04-07 23:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 04:09 - 2015-04-07 23:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-05 15:30 - 2015-04-27 15:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-05 15:30 - 2015-04-27 15:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-05 15:30 - 2015-04-27 15:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-05 15:30 - 2015-04-27 15:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-05 15:30 - 2015-04-27 15:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-05 15:30 - 2015-04-27 15:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-05 15:30 - 2015-04-27 15:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-05 15:30 - 2015-04-27 15:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-05 15:30 - 2015-04-27 15:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-05 15:30 - 2015-04-27 15:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-05 15:30 - 2015-04-27 15:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-05 15:30 - 2015-04-27 15:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-05 15:30 - 2015-04-27 15:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-05 15:30 - 2015-04-27 15:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-05 15:30 - 2015-04-27 15:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-05 15:30 - 2015-04-27 15:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-05 15:30 - 2015-04-27 14:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-05 15:30 - 2015-04-27 14:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-05 15:30 - 2015-04-27 14:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-02 08:15 - 2015-05-02 08:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-05-02 08:10 - 2015-05-02 08:10 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-05-02 07:45 - 2015-05-05 15:34 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype
2015-05-02 07:45 - 2015-05-02 07:45 - 00000000 ____D () C:\Users\John\AppData\Local\Skype
2015-05-02 07:44 - 2015-05-05 15:34 - 00000000 ____D () C:\ProgramData\Skype
2015-05-02 07:40 - 2015-03-04 00:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-02 07:40 - 2015-03-04 00:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-02 07:40 - 2015-03-04 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-02 07:40 - 2015-03-04 00:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-02 07:40 - 2015-02-18 03:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-05-29 19:42 - 2012-04-05 02:59 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-29 19:21 - 2010-02-11 11:43 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-29 19:21 - 2010-02-11 11:43 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-29 19:20 - 2015-01-10 19:13 - 00000000 ____D () C:\Program Files\SpywareBlaster
2015-05-29 19:20 - 2010-08-14 10:16 - 00000000 ____D () C:\ProgramData\TEMP
2015-05-29 13:44 - 2009-07-14 00:34 - 00025552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-29 13:44 - 2009-07-14 00:34 - 00025552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-29 13:35 - 2014-02-26 04:28 - 00000000 ___RD () C:\Users\John\OneDrive
2015-05-29 13:34 - 2009-07-14 00:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-29 13:26 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-29 13:19 - 2014-03-31 19:13 - 00000000 ____D () C:\Program Files\Common Files\The Neat Company
2015-05-29 13:19 - 2009-07-14 00:52 - 00000000 ____D () C:\Windows\twain_32
2015-05-29 13:15 - 2014-12-27 04:22 - 00000000 ____D () C:\Program Files\Neat
2015-05-29 13:03 - 2014-03-31 19:40 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-05-29 10:01 - 2015-03-05 10:58 - 00000472 _____ () C:\Windows\Tasks\Macrium-Backup-{B9AE9F03-994A-48EF-997A-0698FF24685D}.job
2015-05-29 07:46 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-29 06:51 - 2015-01-22 08:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-05-29 06:50 - 2015-01-22 08:55 - 00001364 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-05-29 06:03 - 2015-01-10 19:58 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-29 05:06 - 2012-12-24 06:54 - 00000000 ____D () C:\Users\.pwminder
2015-05-29 05:06 - 2009-07-13 22:37 - 00000000 __RHD () C:\Users\Default
2015-05-29 05:06 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\Public
2015-05-29 04:59 - 2009-07-13 22:04 - 00000215 _____ () C:\Windows\system.ini
2015-05-28 17:13 - 2009-07-14 00:53 - 00032614 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-28 17:12 - 2014-03-06 14:57 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-28 13:33 - 2015-04-16 07:55 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2015-05-28 13:33 - 2015-01-21 20:05 - 00002004 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-05-28 13:33 - 2015-01-21 20:05 - 00001992 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2015-05-28 13:32 - 2010-02-11 11:18 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2015-05-28 08:13 - 2014-07-21 09:16 - 00000000 ____D () C:\Program Files\Opera
2015-05-26 13:39 - 2012-04-05 02:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-26 13:39 - 2011-05-19 08:02 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-26 13:39 - 2010-02-11 11:16 - 00000000 ____D () C:\Users\John\AppData\Local\Adobe
2015-05-26 12:51 - 2015-01-22 08:52 - 00000000 ____D () C:\Users\John\AppData\Local\Windows Live
2015-05-25 16:35 - 2014-10-13 17:51 - 00002089 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-25 15:57 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\rescache
2015-05-25 14:25 - 2014-02-11 19:02 - 00001922 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2015-05-25 08:00 - 2010-11-20 17:01 - 00787398 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-23 19:52 - 2014-01-31 11:23 - 00018217 _____ () C:\ProgramData\hpzinstall.log
2015-05-23 19:20 - 2014-01-29 08:15 - 00000000 ____D () C:\Users\Administrator
2015-05-23 19:09 - 2015-04-12 10:20 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-23 18:55 - 2014-06-29 14:58 - 00002152 _____ () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-23 18:51 - 2012-02-12 11:22 - 00070016 _____ () C:\Users\John\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-23 18:51 - 2009-07-14 00:33 - 00326048 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 08:47 - 2010-04-12 14:19 - 00000000 ____D () C:\ProgramData\HP
2015-05-14 08:46 - 2010-04-12 14:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-05-14 08:39 - 2010-04-12 14:20 - 00000000 ____D () C:\Program Files\HP
2015-05-14 07:22 - 2014-05-08 15:08 - 00000000 ____D () C:\Users\John\Documents\Taxes
2015-05-13 06:56 - 2014-05-06 14:56 - 00000000 ____D () C:\Users\John\Desktop\Humana
2015-05-13 06:56 - 2014-03-18 12:31 - 00000000 ____D () C:\Users\John\Desktop\Easy Estate
2015-05-13 06:56 - 2014-02-05 12:32 - 00000000 ____D () C:\Users\John\Documents\Oil and Gas
2015-05-13 06:56 - 2010-02-12 14:54 - 00000000 ____D () C:\Users\John\Desktop\Badgewinners
2015-05-13 04:41 - 2014-03-10 04:36 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-13 04:32 - 2013-07-12 12:38 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 04:20 - 2012-02-12 12:00 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 04:16 - 2014-03-10 04:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-13 04:16 - 2011-04-11 22:24 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-11 04:18 - 2012-09-13 04:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-05-05 19:26 - 2015-01-10 19:58 - 00001020 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-05 19:26 - 2015-01-10 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-05 19:26 - 2015-01-10 19:58 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-05-05 15:26 - 2010-02-13 10:33 - 00016384 _____ () C:\Windows\system32\msdrve.dll
2015-05-05 15:26 - 2010-02-13 10:33 - 00010816 _____ () C:\Windows\vmoptver.dll
2015-05-05 14:53 - 2015-03-05 10:58 - 00000474 _____ () C:\Windows\Tasks\Macrium-Backup-{F7F770EC-DF76-480A-BDE9-56B4697FE2F8}.job
2015-05-02 08:16 - 2013-10-29 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2015-05-02 08:11 - 2013-09-20 04:51 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-02 08:08 - 2014-10-15 08:54 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-05-02 08:08 - 2010-02-11 11:12 - 00000000 ____D () C:\Program Files\Java
==================== Files in the root of some directories =======
2014-08-25 04:54 - 2014-08-25 04:54 - 0179066 _____ () C:\Users\John\AppData\Local\ars.cache
2014-08-25 04:54 - 2014-08-25 04:54 - 0324251 _____ () C:\Users\John\AppData\Local\census.cache
2014-08-25 04:32 - 2014-08-25 04:32 - 0000036 _____ () C:\Users\John\AppData\Local\housecall.guid.cache
2012-02-14 15:21 - 2014-12-25 07:28 - 0007597 _____ () C:\Users\John\AppData\Local\resmon.resmoncfg
2014-08-25 04:47 - 2014-08-25 04:47 - 0000010 _____ () C:\Users\John\AppData\Local\sponge.last.runtime.cache
2014-01-31 11:23 - 2015-05-23 19:52 - 0018217 _____ () C:\ProgramData\hpzinstall.log
Some files in TEMP:
====================
C:\Users\John\AppData\Local\temp\GLF181B.tmp.EXE
C:\Users\John\AppData\Local\temp\GLF49C6.tmp.EXE
C:\Users\John\AppData\Local\temp\GLF8D0E.tmp.EXE
C:\Users\John\AppData\Local\temp\processcheck.exe
C:\Users\John\AppData\Local\temp\SetACL.exe

==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-05-25 15:48
==================== End of log ============================


Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by John at 2015-05-29 19:49:27
Running from C:\Users\John\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================
Administrator (S-1-5-21-2516008890-62740797-1088872154-500 - Administrator - Disabled) => C:\Users\Administrator
Guest (S-1-5-21-2516008890-62740797-1088872154-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2516008890-62740797-1088872154-1207 - Limited - Enabled)
John (S-1-5-21-2516008890-62740797-1088872154-1001 - Administrator - Enabled) => C:\Users\John
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{1F897E00-83A6-4133-54E1-58F8D35E61C2}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUSUpdate (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: - )
Avast Premier (HKLM\...\avast) (Version: 10.2.2218 - AVAST Software)
BadgeHelpDownloader (HKLM\...\com.BadgeHelp.BadgeHelpDownloader) (Version: 1.4 - UNKNOWN)
BadgeHelpDownloader (Version: 1.4 - UNKNOWN) Hidden
Belarc Advisor 8.4 (HKLM\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)
Bing Bar (HKLM\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Canon Camera Window DC_DV 6 for ZoomBrowser EX (HKLM\...\CameraWindowDVC6) (Version: 6.4.0.9 - )
Canon Camera Window MC 6 for ZoomBrowser EX (HKLM\...\CameraWindowMC) (Version: 6.3.0.8 - )
Canon G.726 WMP-Decoder (HKLM\...\Canon G.726 WMP-Decoder) (Version: 1.1.0.4 - )
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 2.4.0.14 - )
Canon RAW Image Task for ZoomBrowser EX (HKLM\...\RAW Image Task) (Version: 2.5.0.8 - )
Canon RemoteCapture Task for ZoomBrowser EX (HKLM\...\RemoteCaptureTask) (Version: 1.7.0.8 - )
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.19.43 - )
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 5.8.0.74 - )
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Cool & Quiet (HKLM\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version: - )
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Do Not Track Me Add-on 2.2.9.515 (HKLM\...\Do Not Track Me Add-on_is1) (Version: 2.2.9.515 - Abine Inc)
Dropbox (HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\Dropbox) (Version: 2.10.46 - Dropbox, Inc.)
EasyBCD 2.2 (HKLM\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
Express Burn Disc Burning Software (HKLM\...\ExpressBurn) (Version: - NCH Software)
Express Zip File Compression Software (HKLM\...\ExpressZip) (Version: - NCH Software)
Feedback Tool (HKLM\...\{90024193-9F13-4877-89D5-A1CDF0CBBF28}) (Version: 1.1.0 - Microsoft Corporation)
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 2.3.25.1124 - Foxit Software Inc.)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 7.0.6.1126 - Foxit Software Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Drive (HKLM\...\{35574F09-89F9-4B16-B69B-64F3E25901B8}) (Version: 1.21.9226.6034 - Google, Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.1.0.0 (Version: 1.00.0000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)
IHA_MessageCenter (HKLM\...\{80813829-BE27-4799-8BC7-2F75A7B6CB50}) (Version: 1.1.0 - Verizon)
i-Sound Recorder Pro 7.02 (HKLM\...\i-Sound Recorder for Windows 7_is1) (Version: 7.0.2.0 - AbyssMedia.com)
iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Macrium Reflect Home Edition (HKLM\...\MacriumReflect) (Version: 6.0 - Paramount Software (UK) Ltd.)
Macrium Reflect Home Edition (Version: 6.0.482 - Paramount Software (UK) Ltd.) Hidden
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 (HKLM\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2516008890-62740797-1088872154-1001\...\OneDriveSetup.exe) (Version: 17.3.5860.0512 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837B34E3-7C30-493C-8F6A-2B0F04E2912C}) (Version: - )
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 38.0.1 (x86 en-US)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 31.7.0 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 en-US) (HKLM\...\Mozilla Thunderbird 31.7.0 (x86 en-US)) (Version: 31.7.0 - Mozilla)
MyMailList & AddressBook (HKLM\...\{884A3A17-74A5-4D71-98D4-C0BEFB64000D}) (Version: 7.0.0.0 - Elibrium, LLC)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
OpenOffice 4.1.0 (HKLM\...\{C87EF11D-36E9-479D-9898-7541EA1E8A6A}) (Version: 4.10.9764 - Apache Software Foundation)
Opera Stable 29.0.1795.60 (HKLM\...\Opera 29.0.1795.60) (Version: 29.0.1795.60 - Opera Software ASA)
Palm Desktop by ACCESS (HKLM\...\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}) (Version: 6.4.0.0 - Palm, Inc.)
Photo Notifier and Animation Creator (HKLM\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.00.0165 - REALTEK Semiconductor Corp.)
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
RoboForm 7-9-13-5 (All Users) (HKLM\...\AI RoboForm) (Version: 7-9-13-5 - Siber Systems)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.05.58.01(10/20/2014) - Samsung Electronics Co., Ltd.)
Samsung ML-2160 Series (HKLM\...\Samsung ML-2160 Series) (Version: 1.08 (8/24/2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Universal Print Driver 2 (HKLM\...\Samsung Universal Print Driver 2) (Version: 2.50.06.00 - Samsung Electronics Co., Ltd.)
Seagate Dashboard (HKLM\...\{EA266F00-A8E7-43A0-8DED-FBFE3F076934}) (Version: 4.0.2102.0 - Seagate)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
SpeedConnect Internet Accelerator v.8.0 (HKLM\...\SpeedConnect Internet Accelerator v.8.0_is1) (Version: - CBS Software)
SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Tri Peaks 2 Quest For The Ruby Ring (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114079860}) (Version: - Oberon Media)
USB Multi-Channel Audio Device (HKLM\...\C-Media CM106 Like Sound Driver) (Version: - )
WeatherBug® (HKLM\...\WeatherBug®) (Version: 10.0.7.4 - Earth Networks, Inc.)
Windows Driver Package - Intel Net (08/20/2008 8.10.3.0) (HKLM\...\3A5CA951EF665845B5AD1156BD88090C7A4F3E57) (Version: 08/20/2008 8.10.3.0 - Intel)
Windows Installer Clean Up (HKLM\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{164A4365-064D-494D-92C8-9303A5080157}\InprocServer32 -> C:\Program Files\palmOne\SgCalendar.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{188047CE-0F0A-11D7-8331-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{1D67C047-F016-11D6-831E-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PictPreview.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{1FFD7892-06E4-4A0A-941E-BC966900C883}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\Media.ocx (Palm, Inc. developed by ArcSoft, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{209DAEB8-0F02-11D7-8331-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{2E0C66AC-5A87-4AFF-AC9F-93B33D43E4ED}\InprocServer32 -> C:\Program Files\palmOne\SgDateAlarm.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{33AF5286-DC7B-40B3-AF6B-D5E15E9E72B7}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\MpegCodecFilter.ax (Arcsoft)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{33AF5287-DC7B-40B3-AF6B-D5E15E9E72B7}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\MpegCodecFilter.ax (Arcsoft)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{3597288E-FF31-49C2-A58A-EA88F3CEDD42}\InprocServer32 -> C:\Program Files\palmOne\SgCalendar.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{3B52D512-935F-11D6-82D4-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{3CF39B9A-0CF8-4792-A918-67573260BDBE}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\Media.ocx (Palm, Inc. developed by ArcSoft, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{43F73EA1-92AE-11D6-82D3-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{496038FA-3891-4827-AFCD-A7B13B9FF75A}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\PhotosPlugIn.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{5999E1EE-711E-48D2-9884-851A709F543D}\localserver32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{6357BCA7-B06E-11D6-82EF-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\DefaultPlugin.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{6357BCBC-B06E-11D6-82EF-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PqiIcon.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{6600B26A-CCCE-4EF9-870E-DAB97E489CDF}\InprocServer32 -> C:\Program Files\palmOne\SgDateAlarm.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{74531205-74DC-48FF-953B-3B6DC988424F}\InprocServer32 -> C:\Program Files\palmOne\VoiceMemoExt.ocx (Palm, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{763F9014-A89C-11D6-82E7-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{78547CB6-2D08-47F4-A1EB-AF576A33E433}\InprocServer32 -> C:\Program Files\palmOne\SgContacts.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{831B49E8-91A6-11D5-820F-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\ExpenseExt.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{831B49E9-91A6-11D5-820F-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\ExpenseExt.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{868C6D64-8B98-11D5-8209-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\NotePadExt.ocx (Palm, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{868C6D65-8B98-11D5-8209-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\NotePadExt.ocx (Palm, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{87001487-8B8A-4C40-BFEF-036F5BD5BAA3}\InprocServer32 -> C:\Program Files\palmOne\PhotoDesktop\PhotosPlugIn.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{92DA540D-FCC0-442C-8F82-7F6C1DBD66C8}\InprocServer32 -> C:\Program Files\palmOne\SgMemos.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{9D3B3E2B-1789-4A83-8050-5ED8307B02E5}\InprocServer32 -> C:\Program Files\palmOne\VoiceMemoExt.ocx (Palm, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{A3CA1CF4-5F3E-4AC0-91B9-0D3716E1EAC3}\localserver32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{AB40E4E0-0F0C-11D7-8331-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{AF478991-F6B0-40E8-856B-E80BE0677AFC}\InprocServer32 -> C:\Program Files\palmOne\SgTasks.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{B2565128-0F22-11D7-8331-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{B2F7AF3C-0CA7-4EAE-BBBF-A748FBC500DD}\InprocServer32 -> C:\Program Files\palmOne\SgMemos.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{BE1B5231-A3E2-11D6-82E3-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{BE1B5233-A3E2-11D6-82E3-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{BE1B5235-A3E2-11D6-82E3-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{C0010C26-F44B-4BE2-9D65-04D3934C5E46}\InprocServer32 -> C:\Program Files\palmOne\SgTasks.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{C11BCF07-4F91-4748-956E-2B4FFC9401C5}\InprocServer32 -> C:\Program Files\palmOne\SgContacts.ocx (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{DFD4C164-AE18-11D6-82EC-00C04FA03755}\localserver32 -> C:\Program Files\palmOne\QuickInstall.exe (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{EE469827-4ED9-443B-9FB0-EFA81FEA6646}\InprocServer32 -> C:\Program Files\palmOne\Components\DelDups.dll ( palmOne, Inc)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{F21AC7C7-D6F5-11D6-8306-00C04FA03755}\InprocServer32 -> C:\Program Files\palmOne\PRouter.dll (palmOne, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\FileSyncApi.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2516008890-62740797-1088872154-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\John\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
25-05-2015 10:31:33 after cleanup
29-05-2015 04:36:25 ComboFix created restore point
29-05-2015 13:16:05 Removed Neat ADF Scanner 2008 Driver
29-05-2015 13:17:02 Removed Neat Mobile Scanner (Silver) Driver
29-05-2015 13:17:54 Removed Neat ADF Scanner Driver
29-05-2015 13:18:24 Removed NeatConnect Scanner Driver
29-05-2015 13:18:52 Removed Neat Mobile Scanner Driver
29-05-2015 13:19:20 Removed Neat Mobile Scanner 2008 Driver
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:04 - 2015-05-29 04:59 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FA7D11-19F3-4E1A-ABB2-660E18A46B7C} - System32\Tasks\{29E8A03F-B334-4D4F-AEC7-9856E1344E73} => C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
Task: {03616EE6-56AA-490A-9302-1D15228B9846} - System32\Tasks\John DBAgent 2 0 => C:\Program Files\Seagate\Seagate Dashboard 2.0\DBAgent.exe [2015-04-01] (Seagate Technology LLC)
Task: {040C8353-832F-4300-B43A-E4A0DCF84D2F} - System32\Tasks\{FC085321-0A40-4273-9C08-7442361DBCD2} => C:\Program Files\RegVac Registry Cleaner\regvac.exe
Task: {05930089-7213-452F-932C-99E1660B9660} - System32\Tasks\{302D9B42-8CD7-49AF-AABD-F592459DBFF2} => pcalua.exe -a "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" -c /uninstall OUTLOOKR /dll OSETUP.DLL
Task: {05AC2C33-D4AA-46ED-8EF1-6F5DEA506F35} - System32\Tasks\{F44879EE-F59A-456E-A121-2C3A470C7CBC} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {09687ECD-AD3B-42EE-89B8-81F21D63F983} - System32\Tasks\{2C376146-936F-4BF4-B661-5B2FBAD0B352} => D:\setup.exe
Task: {0BBDD4F8-02E4-4E3E-95E1-5DA25F64E921} - System32\Tasks\{C8D819B3-C003-4727-8CEE-79130747A3BE} => pcalua.exe -a "C:\Program Files\BadgeHelp\MadJong\MadJong.Exe" -d "C:\Program Files\BadgeHelp\MadJong\"
Task: {0C6E91BF-3C7C-42AF-8C7D-59554ECD8A5E} - System32\Tasks\{4AA06DF1-F268-4758-960D-1C1D32466C29} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Bloonsy2.exe -d C:\Users\John\Desktop\Badgewinners
Task: {12928432-D790-4F6E-AD78-BAD49C510919} - System32\Tasks\{C5A545AA-EF55-4097-9186-BDEBFAAC11E6} => pcalua.exe -a D:\Driver\Audio\Realtek\WDM_R205.exe -d D:\Driver\Audio\Realtek
Task: {14CA8EDF-4714-41FC-8E33-8B9D06CACC20} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {15198C04-CFFC-4529-A3EE-62D3125CACB5} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {1704AB7D-EC8D-4A50-8A81-466BE6AE8A0D} - System32\Tasks\{8836DFD4-30C5-410F-A1A0-ACAFB189CBE5} => pcalua.exe -a C:\BadgeHelp\BHDownloader\Ricochet.exe -d C:\BadgeHelp\BHDownloader
Task: {22AC0AB8-CE46-4970-AFA6-EBDF07BC2065} - System32\Tasks\{F3CFE148-E4E1-486A-A9CC-9B7A751260A2} => pcalua.exe -a "C:\Program Files\BadgeHelp\Reaper\Reaper.Exe" -d "C:\Program Files\BadgeHelp\Reaper\"
Task: {261A8FA2-D519-495C-87A4-154D171FAF8A} - System32\Tasks\Macrium-Backup-{F7F770EC-DF76-480A-BDE9-56B4697FE2F8} => C:\Program Files\Macrium\Reflect\reflect.exe [2015-04-10] (Paramount Software UK Ltd)
Task: {2796E03B-05D3-42FA-A7D1-15D19F2F91EA} - System32\Tasks\{BB715E2E-D989-4B7D-9650-12C01D6F00CB} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Classy30.exe
Task: {312FAB0B-D2D3-43E7-99F9-F774759A52F5} - System32\Tasks\SpywareBlaster AutoUpdate => C:\Program Files\SpywareBlaster\sbautoupdate.exe [2013-03-01] ()
Task: {3487D64B-AEEA-4AEF-BB82-A4839B5424C5} - System32\Tasks\{FEC0324D-98D7-43EB-A330-C216C816D39E} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Putty11.exe -d C:\Users\John\Desktop\Badgewinners
Task: {375DEC86-BF14-48E3-B26B-C7057B799627} - System32\Tasks\{96D490EA-45E6-465B-A7FB-AE5497579633} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Connecty5.exe -d C:\Users\John\Desktop\Badgewinners
Task: {390844C1-0E82-4808-BF8C-3066ED78E12B} - System32\Tasks\{54691B9F-460B-40E6-A448-79CCB4C305B9} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {391C0D25-5B8C-4F88-AD76-89D9F9157EB1} - System32\Tasks\{BCECE666-4F58-41C2-A320-68FC03A740FB} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Trizzly1.exe -d C:\Users\John\Desktop\Badgewinners
Task: {39F3FF35-D95E-4C5F-8D5F-FF29CCF1591C} - System32\Tasks\{A8156948-A0EA-47E7-A78B-9CFE30B73F86} => C:\Users\John\Desktop\Badgewinners\Keeny5.exe
Task: {3A553121-268E-4467-9ACF-A7CF5F706A91} - System32\Tasks\{DCB1ADA6-21D0-4E51-8C82-DC707332FC5E} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {3F9BF2F3-DE4D-4843-9C8F-0A6AB7EBF0ED} - System32\Tasks\{1B06A80E-65B6-446A-B37B-A95144B7A474} => pcalua.exe -a C:\BadgeHelp\BHDownloader\MiniGolfRadness.exe -d C:\BadgeHelp\BHDownloader
Task: {4104A078-984F-4991-90AB-56568D82AB26} - System32\Tasks\{8AFE4DDD-DEC4-40E5-8E32-FB33BC3B8253} => pcalua.exe -a "C:\Program Files\palmOne\QuickInstall.exe" -c /FileExt
Task: {411F9A96-4F1A-41F8-96A9-AE205B41CFEF} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {434AD738-0F18-4E71-AC4F-14B670EB7CB8} - System32\Tasks\{57B7D344-F43A-44FC-B546-507C00E803D6} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {4456F82A-CBA5-4C28-9CD0-6D8DB1AFFFEE} - System32\Tasks\{663EB71E-FBB9-4D77-AD97-296CC3D7FA97} => pcalua.exe -a C:\BadgeHelp\BHDownloader\RedBaron.exe -d C:\BadgeHelp\BHDownloader
Task: {4A2DBC9F-892B-4FBD-8FE6-1833EF0B8F54} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {4A46CD66-F532-49BB-98AF-B0B9FF684AEC} - System32\Tasks\{93048CEC-ECE7-44DE-BF83-3D3772E758F2} => pcalua.exe -a "C:\Program Files\BadgeHelp\Whomper\Whomper.Exe" -d "C:\Program Files\BadgeHelp\Whomper\"
Task: {4B39CA4D-4707-4DDF-AE86-1D7AD1B0A849} - System32\Tasks\{9722C41E-9ED7-4916-9C23-79DB84D73BEA} => pcalua.exe -a C:\BadgeHelp\BHDownloader\Whomper.exe -d C:\BadgeHelp\BHDownloader
Task: {4D94DE29-ABD4-4DC8-B6E1-86BFDAFE8EFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-26] (Adobe Systems Incorporated)
Task: {4F7DB577-E05E-453A-BC71-FB957FB3F245} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {52E5C1E0-EBA4-4A45-A2F7-AB553208BD5D} - System32\Tasks\{BC64A7A2-6638-492D-83DF-B8B56A7D94A4} => C:\Users\John\Desktop\Badgewinners\Keeny5.exe
Task: {5757FF86-13AF-47EA-B1A4-8147D7D68E26} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {575B5348-15B5-4252-AB07-DAEF6EDCF835} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {6623D003-34EC-4B31-9C5C-F9DF8FC5CE1C} - System32\Tasks\John => C:\Program Files\Seagate\Seagate Dashboard 2.0\NBCore.exe [2015-04-01] (Seagate Technology LLC)
Task: {67B02E09-3FB6-4234-BCF6-BD5D23D97CC0} - System32\Tasks\{A47A4014-4D7B-46FD-A81C-A69C9C65CFB6} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {6BECBBF5-BA9E-447D-84AB-6306D3B02D61} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-05-02] (Siber Systems)
Task: {6EA8B914-7FA2-4743-8BD8-250002168475} - System32\Tasks\{3FCAC97E-E959-4147-B31F-50D9E3B5506D} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Jiggy8.exe -d C:\Users\John\Desktop\Badgewinners
Task: {70955539-879B-4C50-A13E-2FBAD12339A8} - System32\Tasks\{9AD6FC26-4556-4D53-B3B0-0AD7E0F97CEA} => pcalua.exe -a C:\Users\John\AppData\Local\Temp\Temp1_EVGAPrecision[1].ZIP\EVGA_Precision_Setup_195.exe
Task: {729597B6-45FE-400E-8E15-D9293867297E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {7FD9C9FE-5482-4FD8-BDDC-081096872DAD} - System32\Tasks\{4BE78229-EDE2-4B45-9C1C-C417F03D8402} => pcalua.exe -a "C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YMCDX6VB\VisualBasic6-KB896559-v1-ENU.exe" -d "C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YMCDX6VB"
Task: {813EAC9B-D2C6-428E-8DD2-3C5D210085C2} - System32\Tasks\{11C9D7FE-EAF9-40AB-9483-727A44007149} => pcalua.exe -a C:\Users\John\Downloads\msicuu2.exe -d C:\Users\John\Downloads
Task: {8256F6B9-73C7-453E-AE5C-1E2C0BEC03F5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-26] (Avast Software s.r.o.)
Task: {8B69F5C2-9176-460B-95AD-200C4491B281} - System32\Tasks\{999A3CD8-8157-4219-863B-A0F00B20F951} => pcalua.exe -a C:\Users\John\Downloads\greenback.exe -d C:\Users\John\Downloads
Task: {8EA57E6E-E994-48F3-AE29-807906BF529F} - System32\Tasks\{B67500CC-39A4-43D2-8ED2-468FBBCF72E8} => D:\setup.exe
Task: {90D41970-578B-4096-BDB6-4B2ED05DC288} - System32\Tasks\{36FD1E63-C512-453A-AEDE-B0346924D9BF} => pcalua.exe -a C:\Users\John\Downloads\picozipsetup401est.exe -d C:\Users\John\Desktop
Task: {9481E059-4BDE-4789-AEC5-EC4CC8D3BF08} - System32\Tasks\{DA9E94B4-2603-418A-B310-ED907067EB94} => pcalua.exe -a C:\BadgeHelp\BHDownloader\BlackjackBuckaroo.exe -d C:\BadgeHelp\BHDownloader
Task: {94CDCE00-994F-44DF-A9A5-9F04215226A3} - System32\Tasks\{6A38C24C-4193-4C27-9540-066FC3BC8D3D} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Luxey5.exe
Task: {9618E4D4-BC6A-475E-9E6B-B58BEA1BD709} - System32\Tasks\{CDE0193D-07B5-45E9-8A83-CA7BE9B30054} => pcalua.exe -a "C:\Program Files\NCH Software\Doxillion\uninst.exe"
Task: {99919156-6488-4F59-8A72-7A680E28C65F} - System32\Tasks\{B4F434DF-8567-4227-8133-26B7A41633F7} => pcalua.exe -a "C:\Program Files\BadgeHelp\BumbleJumble\BumbleJumble.Exe" -d "C:\Program Files\BadgeHelp\BumbleJumble\"
Task: {9B63BBD9-C9B6-4C20-A344-6AFDF3F8EA28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {9D80D5F7-767A-45C1-94E9-05E96A1F1F46} - System32\Tasks\Seagate_Install_Launch => C:\Program Files\Seagate\Seagate Dashboard 2.0\Dashboard.exe [2015-04-01] (Seagate Technology LLC)
Task: {A1F53E2D-D5B3-4C60-B2C2-79A919FD9E2B} - System32\Tasks\NCH Software\expresszipShakeIcon => C:\Program Files\NCH Software\ExpressZip\ExpressZip.exe [2012-04-15] (NCH Software)
Task: {A26D6D9F-8B90-440D-811C-B5FF9B31FE2F} - System32\Tasks\{E99A0A57-A1B4-4BBC-8540-06078D2F1F9B} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {A74116BA-2B92-4F94-8B25-0D70FDC2F93C} - System32\Tasks\{30FB8B1D-8652-4E34-AA55-DB2C1CE44780} => C:\Users\John\Saved Games\BaggleBosh.exe
Task: {A7719257-4187-4923-8CB8-D3C2224F6ECA} - System32\Tasks\{083DF308-D3E7-47D9-B8A6-A82C866E78E7} => pcalua.exe -a C:\BadgeHelp\BHDownloader\SafariHunt.exe -d C:\BadgeHelp\BHDownloader
Task: {A79E2703-DD68-48CC-88B6-B8C024946C2E} - System32\Tasks\{E71E1953-80C9-482E-9F82-11D3CB8B30EE} => C:\BadgeHelp\BHDownloader\RedBaron.exe [2013-09-13] ()
Task: {AA3CF336-1D69-4018-818D-9DDF750ADA7F} - System32\Tasks\{52786842-633B-436A-AAE9-9481D39A8D8B} => pcalua.exe -a "C:\Program Files\IncrediMail\Bin\ImSetup.exe" -c /uninstallProduct /addon:incredimail
Task: {AD3F2DFF-FF00-43AD-B353-D5E2D95786BA} - System32\Tasks\{EFB2154E-7038-44FC-88C5-8F0ADD4FA384} => C:\Users\John\Downloads\yuiop.exe
Task: {AFA1E860-B0DD-4648-A967-0BBD5E2E5818} - System32\Tasks\Opera scheduled Autoupdate 1418383079 => C:\Program Files\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {B12655AE-5F53-4724-8C7C-BD34C1D6B196} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
Task: {B340B220-D0A1-4DCD-96FA-09C4517ADDB3} - System32\Tasks\{4B2BA3BF-C7E4-4505-90C8-50FEDE4AB9A3} => C:\Program Files\MySoftware\AddressBook\MailList.exe [2004-10-04] (Elibrium, LLC)
Task: {B41456D9-2CD5-4E99-95FE-2435A0155A70} - System32\Tasks\{27ACC259-E57D-4678-BE94-D128B14DCA26} => pcalua.exe -a C:\BadgeHelp\BHDownloader\Hairspray.exe -d C:\BadgeHelp\BHDownloader
Task: {BB5CF28F-CEAC-4A78-A530-F495C471A64E} - System32\Tasks\{1818DCCA-6888-4E12-8F02-1F7F07616908} => D:\setup.exe
Task: {BED410A0-94A4-4ED1-A03D-5F629493E432} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Norton 360\Engine\20.2.1.22\SymErr.exe
Task: {BFAB708C-2E53-46C1-B305-65F637FB4D69} - System32\Tasks\{02CB3B67-CBFF-4900-8E21-22EFCBF06CA8} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Pengwins8.exe -d C:\Users\John\Desktop\Badgewinners
Task: {C3B06BD7-240E-41AE-866E-8FAAE40EFDD3} - System32\Tasks\Macrium-Backup-{B9AE9F03-994A-48EF-997A-0698FF24685D} => C:\Program Files\Macrium\Reflect\reflect.exe [2015-04-10] (Paramount Software UK Ltd)
Task: {CFA9BAF2-8F5F-4544-B9BD-D64A56A604C9} - System32\Tasks\{E8DB6733-8A6D-47A9-BD84-C3A644F1BF71} => C:\Program Files\BadgeHelp\Barnstorm\Barnstorm.Exe [2013-07-31] ()
Task: {CFDD420A-2638-4D6F-A60D-069829EC191A} - System32\Tasks\{90E31354-37D5-43D7-8D2E-77630D4462B6} => C:\Users\John\Downloads\yuiop.exe
Task: {D422E5FF-5C54-43A2-A53E-5891968635B0} - System32\Tasks\{360099C4-DBA6-4015-9278-20D10BEB3BC2} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Wedgy18.exe -d C:\Users\John\Desktop\Badgewinners
Task: {D507CA49-B2B6-4688-A8FD-19C4FD3E0534} - System32\Tasks\EVGAPrecision => C:\Program Files\EVGA Precision\EVGAPrecision.exe
Task: {DB474937-7A96-4F2C-B422-61391F592086} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360\Norton 360\Engine\20.2.1.22\SymErr.exe
Task: {DDC4F40F-4055-4C28-9BDF-DB21474570D6} - System32\Tasks\John Merge => C:\Program Files\Seagate\Seagate Dashboard 2.0\NBCore.exe [2015-04-01] (Seagate Technology LLC)
Task: {DFF57D15-42CD-40DF-B46E-DC78ECC7902F} - System32\Tasks\{1F7603A3-FAE9-44D8-B0B5-B769E7E093DE} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Sudoky5.exe
Task: {E2D8DFA6-DBE4-4725-A418-9A2E6E9F58F4} - System32\Tasks\{09D8F701-672F-4999-930D-18CBAA3BC271} => pcalua.exe -a C:\Users\John\Desktop\Badgehelp\Barnstorm.exe -d C:\Users\John\Desktop
Task: {E857B4F5-D0D7-4415-97EE-D5BA9FD1CA2D} - System32\Tasks\Norton Management\Norton Error Processor => C:\Program Files\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {EA80FC0C-4EE9-469B-8B41-19608150034F} - System32\Tasks\{05FDF1F9-E85C-46A5-A882-72489D2CB431} => pcalua.exe -a "C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06EZ72IQ\JavaSetup6u27.exe" -d C:\Users\John\Desktop
Task: {EBD539FC-A068-478D-A8A3-F629CDF305D4} - System32\Tasks\{756C9AB7-1643-439B-9E66-C14CCCD7DDCD} => pcalua.exe -a C:\Users\John\Desktop\Badgewinners\Whompy30.exe
Task: {F01C5D14-A64B-4BED-86DE-F4D9F4EB2839} - System32\Tasks\Norton Management\Norton Error Analyzer => C:\Program Files\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {F2B51B01-8FEA-4578-9416-85B909A6FAC3} - System32\Tasks\{66D5E93B-C451-4985-B695-227F74E3BA5E} => pcalua.exe -a C:\BadgeHelp\BHDownloader\Harvester.exe -d C:\BadgeHelp\BHDownloader
Task: {F5550C98-634F-4711-ADA5-27F5BF27B8D4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {FDB62C16-C8BC-44C5-AD3A-4E4C81B73E8B} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/test-pass.h...MKMNMGMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Macrium-Backup-{B9AE9F03-994A-48EF-997A-0698FF24685D}.job => C:\Program Files\Macrium\Reflect\reflect.exee-e -w C:\Users\John\Documents\Reflect\My Backup.xml
Task: C:\Windows\Tasks\Macrium-Backup-{F7F770EC-DF76-480A-BDE9-56B4697FE2F8}.job => C:\Program Files\Macrium\Reflect\reflect.exef-e -w C:\Users\John\Documents\Reflect\My Backup.xml
==================== Loaded Modules (Whitelisted) ==============
2015-04-26 14:29 - 2015-04-26 14:29 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-26 14:29 - 2015-04-26 14:29 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-05-29 08:06 - 2015-05-29 08:06 - 02950656 _____ () C:\Program Files\AVAST Software\Avast\defs\15052900\algo.dll
2015-05-29 17:37 - 2015-05-29 17:37 - 02950656 _____ () C:\Program Files\AVAST Software\Avast\defs\15052901\algo.dll
2012-04-15 09:05 - 2012-04-15 09:05 - 00081408 _____ () C:\Program Files\NCH Software\ExpressZip\ezcm.dll
2012-01-05 08:17 - 2012-01-05 08:17 - 00026624 _____ () C:\Windows\System32\spd__l.dll
2014-02-05 09:34 - 2011-04-11 01:26 - 00024064 _____ () C:\Windows\System32\spe__l.dll
2015-04-08 09:59 - 2015-04-08 09:59 - 00018432 _____ () C:\Windows\System32\ssj1mlm.dll
2015-02-15 13:01 - 2014-04-16 04:22 - 00025600 _____ () C:\Windows\System32\usp02l.dll
2015-03-19 07:18 - 2015-03-19 07:18 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2012-06-11 14:11 - 2012-06-11 14:11 - 00065024 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-08 14:30 - 2014-09-08 14:30 - 00351968 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2014-09-08 14:32 - 2014-09-08 14:32 - 00050688 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2015-02-15 13:02 - 2014-11-26 07:07 - 00118576 _____ () C:\Windows\system32\SecUPDUtilSvc.exe
2012-06-11 14:11 - 2012-06-11 14:11 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-06-11 13:45 - 2012-06-11 13:45 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-03-31 22:35 - 2014-03-31 22:35 - 00270016 _____ () C:\Program Files\Windows Live\Writer\en\WindowsLive.Writer.Localization.resources.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:5EC637CB
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> 008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> 00hq.com
IE restricted site: HKU\.DEFAULT\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\.DEFAULT\...\01i.info -> 01i.info
IE restricted site: HKU\.DEFAULT\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\.DEFAULT\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\.DEFAULT\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\.DEFAULT\...\05p.com -> 05p.com
IE restricted site: HKU\.DEFAULT\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\.DEFAULT\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\.DEFAULT\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\.DEFAULT\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\.DEFAULT\...\0calories.net -> 0calories.net
IE restricted site: HKU\.DEFAULT\...\0cj.net -> 0cj.net
IE restricted site: HKU\.DEFAULT\...\0scan.com -> 0scan.com
IE restricted site: HKU\.DEFAULT\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1-se.com -> 1-se.com
IE restricted site: HKU\.DEFAULT\...\1001movie.com -> 1001movie.com
There are 6092 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\John\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 75.75.75.75 - 75.75.76.76
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^John^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^HotSync Manager.lnk => C:\Windows\pss\HotSync Manager.lnk.Startup
MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{74AC1E82-59FE-40AD-8CEA-74FC1BB7434A}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{DC113277-8857-4457-93AC-6E73929FFDAB}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{2985F70A-CF9C-4B8F-9E54-98A88DAF92BC}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{358E0FD7-6459-4888-9834-63FDBD11A871}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{B4295191-980D-4A04-9A23-ED2DE1D8ED61}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{B39E6273-AAE1-4B6F-AE11-0D980BB75C91}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{B533A272-8B36-4E14-953A-9ECB7B566E02}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{D053B791-0FEF-42B1-B12C-2E58F87411FF}] => (Allow) LPort=50000
FirewallRules: [{440E21AB-B0EF-46AF-AAAE-0FAB6F07FC23}] => (Allow) LPort=50000
FirewallRules: [{DF282694-DAE3-4020-852C-DF37FE0F1571}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CC62EF3C-DE20-410E-A232-2EA242180D9E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{29746EC8-BD55-461A-9F78-6E6EC45FA344}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{30FFB4F8-0A72-4946-82E1-3AF651E84199}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{2AEA3AF4-0F0D-407B-A767-129981F3EE3D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{3BD2EA0A-74D0-484F-8E31-66F0896B862E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{A046A61D-8FF5-4E15-A092-44D21AE68D6D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{97A14C1C-2FBA-48D7-A07C-3515AFF207B1}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{19B4B266-A24D-4ACB-AB35-E26A03193272}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{D562F2BA-A910-4B3D-AE1C-901905210471}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{BBB927CA-893D-4854-A9BB-1755E23CDB2F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{4F4B0758-D4D8-41E4-AC8D-B3626E589027}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{B068A80F-9ACA-4807-B658-F50920CD65BC}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{265D1CB2-0772-4CE4-9B08-EA8C467F884B}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{D0B78DE8-3877-4E49-8710-4F729B7475FB}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{474153EC-60A4-4070-A329-3CC8FAB61286}] => (Allow) LPort=1542
FirewallRules: [{192AD605-21DE-4B6C-B061-F5262F1F58E0}] => (Allow) LPort=1542
FirewallRules: [{2BAC372B-707E-4EBF-8446-D3466722DC45}] => (Allow) LPort=53
FirewallRules: [{21A3A56C-7806-47AE-9364-819B5E05E8F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FF7702DA-229F-49F1-8FE2-80B97D9046A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{53BA0113-7B83-44DB-968F-3E9EE6B2B2E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9DAC5880-90F8-4209-853B-46302A11369C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{294F0903-936F-48C4-85DF-F094D6084F0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DE60DC27-0BAE-49A0-A2DC-395E7D56DBD0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FCBB592E-4748-4AB3-937D-36D0141B94FC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3CECDB8B-A771-46DD-A632-47A8197089E1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8F02F043-858F-441D-AB41-6CBE7363EF12}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{024B26EE-A56D-41CD-A9B1-F3DF331A1E21}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{B95663AF-76E7-405E-ADBA-4CD571EA6DF1}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{D665CB47-8D48-414A-B698-7C7F0D74927E}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{3079C512-EB62-4998-AA95-E8982181147F}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{E3B3E476-BC50-4D06-BAD8-4D5ABD2A15E2}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{9B23881C-7849-4F88-B1F1-018470A10183}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{6D160D22-2D90-4418-B395-EC14D65AAD4F}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{6C595B9D-720B-4544-A853-6F0357EEB157}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{A8CA2648-6CB7-4746-9EB5-C3EFAE868983}] => (Allow) C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{633A638D-3C4B-4B8B-82FD-4F1CE6CBEE5F}] => (Allow) C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{647030AF-B827-437A-9D52-C4B98323A258}] => (Allow) LPort=8888
FirewallRules: [{A376EE5A-5B9E-4B5A-A47E-BAEDEAF53B10}] => (Allow) C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A09FA644-E23D-4FBD-9B60-2C455A9DA673}] => (Allow) C:\Users\John\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8531B72E-793A-40B7-B6C2-64843117DA27}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{C4ED941B-E4DF-4B7A-9249-265B55AF0A84}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{1F2516C0-84C7-479E-8C13-6AABC50FAE0A}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CDF85990-929F-4A76-9F43-879FA26E21BC}] => (Allow) LPort=2869
FirewallRules: [{1183EDD7-6ADD-4586-AEBD-9375BA038FD9}] => (Allow) LPort=1900
FirewallRules: [{5D3A1BCC-D1AA-4821-BE71-C93DC5A69466}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7FC7CB23-91AF-4730-86CD-3E13A3041255}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{83051C30-780F-41BA-9A34-EC8F2B1E7F82}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{BC495E18-7969-4DB5-8E5A-0785D261F10C}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{1C4BE8D7-9121-455C-91F4-E96E9720A6E6}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{34C89B35-D4A5-4224-B629-06907811FAB9}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{88089A5C-5B4B-4764-8CA3-B42B3617B143}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{03424273-4C4C-472E-8A40-4E7FD6FD2CC4}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{7D183E28-28A1-4042-8D72-6B5D612379F0}] => (Allow) C:\Program Files\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{4F9D74CA-BCCC-4866-884A-1F884193E89B}] => (Allow) C:\Program Files\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe
FirewallRules: [TCP Query User{F2A4EAB2-0F2C-4CCC-9FE5-CFFE2C966700}C:\Program Files\Seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\Program Files\Seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [UDP Query User{A0BA30A2-4783-4146-BD73-5411B45CAA62}C:\Program Files\Seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\Program Files\Seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [TCP Query User{AB3DED8B-43C8-4671-8CD3-C5370D8807F1}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe] => (Block) C:\program files\seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [UDP Query User{21B3909D-3912-40B6-88FC-136C6362F211}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe] => (Block) C:\program files\seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [{96B93124-6E0A-4778-868A-737162ACA44B}] => (Allow) C:\Users\John\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{4C9BDF19-029E-41FB-A64F-E0FF1FC6E9D5}] => (Allow) LPort=8888
FirewallRules: [{6802188D-406C-4D26-BFD5-6E152FA6C325}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{1037D8BE-DFCF-40A6-A317-97BF307B8684}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{8C39331C-9624-4DBB-99C3-1BEB9FB9180E}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS2866\HPDiagnosticCoreUI.exe
FirewallRules: [{D7D558F2-3245-470B-B177-B5DC59FB2D9E}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS2866\HPDiagnosticCoreUI.exe
FirewallRules: [{E0D3E38D-B2FE-4D00-842D-79A3ECB61A29}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS28E8\HPDiagnosticCoreUI.exe
FirewallRules: [{85C4ADB4-FE69-4D5D-9A5F-FD862900CE46}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS28E8\HPDiagnosticCoreUI.exe
FirewallRules: [{58AFCCA4-44F4-44E8-A964-70DDE83A97AF}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS33D7\HPDiagnosticCoreUI.exe
FirewallRules: [{B58BE835-2F67-4D34-9564-79430C22582A}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS33D7\HPDiagnosticCoreUI.exe
FirewallRules: [{46B1B925-2236-4ADF-B2C6-02024AAA7F43}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS0F3C\HPDiagnosticCoreUI.exe
FirewallRules: [{8CC798B4-CE90-4785-853D-B59BC3471493}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS0F3C\HPDiagnosticCoreUI.exe
FirewallRules: [{0E2B1B2E-1619-44FC-AC63-D4B36CA11EC7}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS2084\HPDiagnosticCoreUI.exe
FirewallRules: [{6690FD78-A6E6-4967-ADD2-FEDB03E6DDD6}] => (Allow) C:\Users\John\AppData\Local\Temp\7zS2084\HPDiagnosticCoreUI.exe
FirewallRules: [{E44C3EE5-E4EB-4D5A-AD66-1611F506FC63}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: Null
Description: Null
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: Null
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================
Application errors:
==================
Error: (05/29/2015 01:36:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 01:22:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 00:24:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.9600.17801 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 4d0
Start Time: 01d09a2b74aa1070
Termination Time: 0
Application Path: C:\Program Files\Internet Explorer\iexplore.exe
Report Id: 273a4071-061f-11e5-b2b2-001e8ca31bce
Error: (05/29/2015 09:52:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 08:05:34 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 06:48:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 68c
Start Time: 01d099f0336ce640
Termination Time: 0
Application Path: C:\Windows\Explorer.EXE
Report Id: 3efeb531-05f0-11e5-8eac-001e8ca31bce
Error: (05/29/2015 06:04:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (05/29/2015 06:04:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (05/29/2015 06:03:48 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (05/29/2015 05:18:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (05/29/2015 01:36:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Null
Error: (05/29/2015 01:36:33 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (05/29/2015 01:23:02 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (05/29/2015 01:22:09 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Null
Error: (05/29/2015 09:53:12 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (05/29/2015 09:52:21 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Null
Error: (05/29/2015 08:06:29 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (05/29/2015 08:05:35 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Null
Error: (05/29/2015 05:19:35 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005
Error: (05/29/2015 05:18:54 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Null

Microsoft Office:
=========================
Error: (05/29/2015 01:36:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 01:22:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 00:24:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.178014d001d09a2b74aa10700C:\Program Files\Internet Explorer\iexplore.exe273a4071-061f-11e5-b2b2-001e8ca31bce
Error: (05/29/2015 09:52:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 08:05:34 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/29/2015 06:48:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.1.7601.1756768c01d099f0336ce6400C:\Windows\Explorer.EXE3efeb531-05f0-11e5-8eac-001e8ca31bce
Error: (05/29/2015 06:04:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Seagate\Seagate Dashboard 2.0\NBVSSTool_x64.exe
Error: (05/29/2015 06:04:09 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\ati technologies\ATI.ACE\core-static\SLSTaskbar64.exe
Error: (05/29/2015 06:03:48 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Samsung\samsung ml-2160 series\Setup\Setup\bin\wiainst64.exe
Error: (05/29/2015 05:18:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

CodeIntegrity Errors:
===================================
Date: 2014-10-05 13:54:53.538
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll because the set of per-page image hashes could not be found on the system.
Date: 2014-10-05 13:27:14.763
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll because the set of per-page image hashes could not be found on the system.
Date: 2014-10-05 04:17:01.164
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll because the set of per-page image hashes could not be found on the system.
Date: 2014-10-05 03:02:24.567
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
Percentage of memory in use: 59%
Total physical RAM: 3326.49 MB
Available physical RAM: 1363.79 MB
Total Pagefile: 6652.98 MB
Available Pagefile: 4639.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1923.22 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:407.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (New Volume) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive k: (Seagate Backup Plus Drive) (Fixed) (Total:931.51 GB) (Free:131.77 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 81458145)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=465.7 GB) - (Type=07 NTFS)
========================================================
Disk: 5 (Size: 931.5 GB) (Disk ID: 00050BDE)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of log ============================

 

[Corrine]

Hi, John.

The FRST log shows some additional cleanup we can do, including some old Norton 360 files. The only indication in the FRST logs for HP Print and Scan Doctor is a shortcut on the "Public" desktop, which I've included for removal.

Please do the following to run FRST:

Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Open Notepad (Start =>All Programs => Accessories => Notepad).
• Copy/Paste the entire contents of the code box below into Notepad.

start
CreateRestorePoint:
CloseProcesses:
C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKU\S-1-5-21-2516008890-62740797-1088872154-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Task: {BED410A0-94A4-4ED1-A03D-5F629493E432} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Norton 360\Engine\20.2.1.22\SymErr.exe
Folder: C:\Program Files\Norton 360\Norton 360
Task: {CFDD420A-2638-4D6F-A60D-069829EC191A} - System32\Tasks\{90E31354-37D5-43D7-8D2E-77630D4462B6} => 
C:\Users\John\Downloads\yuiop.exe
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:5EC637CB
EmptyTemp:
end

• Click Format and ensure Wordwrap is unchecked.
• Important: Save the code to the same folder/directory that FRST.exe is located in, naming it as fixlist.txt
• Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....
  • Press the Fix button once and wait.
  • FRST will process fixlist.txt
  • When finished, it will produce a log fixlog.txt in the same folder/directory as FRST64.exe
  • Please post the log in your next reply.

Since SFC errors are dealt with in a different forum, we'll talk about that after you do the above and let me know how your computer is working.

 

[john19303]

Hi, Corrine, here is the fixlog.txt

Fix result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by John at 2015-05-30 06:52:33 Run:1
Running from C:\Users\John\Desktop
Loaded Profiles: John (Available Profiles: John & Administrator & Classic .NET AppPool)
Boot Mode: Normal
==============================================
fixlist content:
*****************
start
CreateRestorePoint:
CloseProcesses:
C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKU\S-1-5-21-2516008890-62740797-1088872154-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Task: {BED410A0-94A4-4ED1-A03D-5F629493E432} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Norton 360\Engine\20.2.1.22\SymErr.exe
Folder: C:\Program Files\Norton 360\Norton 360
Task: {CFDD420A-2638-4D6F-A60D-069829EC191A} - System32\Tasks\{90E31354-37D5-43D7-8D2E-77630D4462B6} =>
C:\Users\John\Downloads\yuiop.exe
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:5EC637CB
EmptyTemp:
end
*****************
Restore point was successfully created.
Processes closed successfully.
C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => key Removed successfully.
"HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Google" => key Removed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key Removed successfully.
"HKU\S-1-5-21-2516008890-62740797-1088872154-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key Removed successfully.
HKU\S-1-5-21-2516008890-62740797-1088872154-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value Removed successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BED410A0-94A4-4ED1-A03D-5F629493E432}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BED410A0-94A4-4ED1-A03D-5F629493E432}" => key Removed successfully.
C:\Windows\System32\Tasks\Norton 360\Norton Error Processor => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton 360\Norton Error Processor" => key Removed successfully.
========================= Folder: C:\Program Files\Norton 360\Norton 360 ========================
folder not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CFDD420A-2638-4D6F-A60D-069829EC191A}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CFDD420A-2638-4D6F-A60D-069829EC191A}" => key Removed successfully.
C:\Windows\System32\Tasks\{90E31354-37D5-43D7-8D2E-77630D4462B6} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{90E31354-37D5-43D7-8D2E-77630D4462B6} => => key not found.
"C:\Users\John\Downloads\yuiop.exe" => File/Folder not found.
C:\ProgramData\TEMP => ":5C321E34" ADS Removed successfully..
C:\ProgramData\TEMP => ":5EC637CB" ADS Removed successfully..
EmptyTemp: => Removed 494 MB temporary data.

The system needed a reboot.
==== End of Fixlog 06:54:24 ====

 

[Corrine]

Hi, John.

Since SFC errors are dealt with in a different forum, we'll talk about that after you do the above and let me know how your computer is working.

 

[john19303]

Hi Corrine,

I don't understand, I thought I did what you asked me to do. The desktop icon is gone, but not the Hewlett-Packard and HP program files. Computer seems to be working fine except for the scannow.

The results of 'sfc /scannow' are below. Please advise. Thank you and have a great weekend ~ John


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log
C:\Windows\system32>

 

[Corrine]

Hi, John.

The only thing showing in your logs for Hewlett Packard is "Hewlett-Packard ACLM.NET v1.1.0.0", which contains the HP Active Support Library, a collection of tools that can be used to troubleshoot and diagnose issues with the laptop. It is not required and you can uninstall it. However, there is no reference in any of the logs to HP Print or Scan Doctor.

Regarding the SFC corruption, any chance the corruption showed up after installing "Update for Windows 7 for x64-based Systems (KB3022345)"? You can find the list of installed updates at Control Panel\All Control Panel Items\Windows Update\View update history. I will probably be easiest to find if you click on the "Date Installed" column. It may take a bit for the list to load. If KB3022345 is on the list, see Go The Power's instructions here: GUIDE: KB3022345 - Causing corrupt files.

 

[john19303]

Hi, Corrine,

Yes, I did have KB3022345, did follow the instructions and SFC /scannow is good. See repair fix below. System works great. And thanks for your help. Interesting journey for this system :smile9:. Good job! Take good care, John


SFCFix version 2.4.3.0 by niemiro.
Start time: 2015-05-31 05:21:06.325
Microsoft Windows 7 Service Pack 1 - x86
Using .zip script file at C:\Users\John\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\telemetry.ASM-WindowsDefault.json
Successfully took permissions for file or folder C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\utc.app.json
Successfully copied file C:\Users\John\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\telemetry.ASM-WindowsDefault.json to C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\telemetry.ASM-WindowsDefault.json.
Successfully copied file C:\Users\John\AppData\Local\niemiro\Archive\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\utc.app.json to C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\utc.app.json.
Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\telemetry.ASM-WindowsDefault.json
Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\telemetry.ASM-WindowsDefault.json
Successfully restored ownership for C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\utc.app.json
Successfully restored permissions on C:\Windows\winsxs\x86_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_6.1.7601.18839_none_a1e9aa37653a7ea4\utc.app.json
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 2.4.3.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2015-05-31 05:21:07.323
Script hash: ghDlBImBcxtliUdnojLKr1CZzOCAMDSWG2syV0jjUJ0=
----------------------EOF-----------------------

 

[Corrine]

:dance:

I'm so glad that Go The Power's fix was the final solution to the problems on your laptop!

 

[john19303]

Hi, Corrine,
Happy Dance! :beerchug2: And it's as nimble as can be. Thank you so much for your help. You may mark it (Solved). (btw, it's an old homebrew desktop ca. 2001, born as an XP)

Thanks again..... John19303

 

[Corrine]

You are very welcome, John.

I love that a ~14 year old computer, even with requiring replacement parts, is staying out of the landfill!