Solved Viruses overwhelming browser

LisaR · Dec 27, 2014

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12/27/2014
Scan Time: 4:53:33 PM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.27.08
Rootkit Database: v2014.12.23.02
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Lisa Rey

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 334209
Time Elapsed: 31 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 213
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vosteran, Quarantined, [369ee1863b41ba7c6b7cdf7de3207090],
Rogue.Multiple, C:\ProgramData\1837308050, Quarantined, [7a5ad493ceaeb87e9496a96f937025db],
PUP.Optional.Datamngr.A, C:\Users\Lisa Rey\AppData\LocalLow\DataMngr, Quarantined, [fada2146bebe1224da21a687fa091be5],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf, Delete-on-Reboot, [a4308fd80a72c373b2fda69d5fa4d828],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64, Delete-on-Reboot, [a4308fd80a72c373b2fda69d5fa4d828],
PUP.Optional.ZombieNews.A, C:\Users\Lisa Rey\AppData\Local\ZombieNews, Quarantined, [8450b0b7601c7bbb6ac7093d40c3669a],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver1BlockAndSurf, Quarantined, [854fff6839433afcab04f552be451fe1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver1BlockAndSurf\x64, Quarantined, [854fff6839433afcab04f552be451fe1],
PUP.Optional.Techgile.A, C:\Program Files (x86)\Techgile, Quarantined, [a0343433621ab482900c242d42c17e82],
PUP.Optional.Techgile.A, C:\Program Files (x86)\Techgile\bin, Quarantined, [a0343433621ab482900c242d42c17e82],
PUP.Optional.Techgile.A, C:\Program Files (x86)\Techgile\bin\plugins, Quarantined, [a0343433621ab482900c242d42c17e82],
PUP.Optional.Techgile.A, C:\Program Files (x86)\Techgile\bin\TEMP, Quarantined, [a0343433621ab482900c242d42c17e82],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\sweetpacks bundle uninstaller, Quarantined, [6470c4a369132016e94bf2603cc7e818],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application\31.0.1650.23, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application\31.0.1650.23\Extensions, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application\31.0.1650.23\Installer, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application\31.0.1650.23\Locales, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\Application\31.0.1650.23\VisualElements, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Cache, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\databases, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extension Rules, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images\carousel, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\facebook\images\carousel\screenshots, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\data, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\images, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\gallery\images\blackfriday, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\weather, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\app\spots\weather\images, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\css, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\about, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\apps, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\clean, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\discovery, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\favorites, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\ftue, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\icons, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\icons\pageAction, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\image-upload, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\loaders, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\notifications, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\phone, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\review-gifs, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\review-gifs\cat, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\search, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\bubbles, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\buttons, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\city, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\clean, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\disco, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\fishing, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\forest, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\mountains, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\planets, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\sea, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\space, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\strips, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\themes\sunset, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\img\user, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\js, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\lib, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\locales, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ar, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\de, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\en, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\es, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\fr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\he, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\it, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ja, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\nl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\pl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\pt_BR, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\ru, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\bjaelnipcipenlfdoncdclohekeglkac\0.3.8_0\_locales\tr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\css, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\html, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\images, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\bg, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\ca, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\cs, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\da, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\de, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\el, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\en, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\en_GB, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\es, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\es_419, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\et, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\fi, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\fil, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\fr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\hi, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\hr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\hu, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\id, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\it, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\ja, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\ko, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\lt, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\lv, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\nb, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\nl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\pl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\pt_BR, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\pt_PT, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\ro, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\ru, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\sk, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\sl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\sr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\sv, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\th, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\tr, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\uk, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\vi, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\zh_CN, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_locales\zh_TW, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\_metadata, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\GPUCache, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\IndexedDB, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\IndexedDB\chrome-extension_bjaelnipcipenlfdoncdclohekeglkac_0.indexeddb.leveldb, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\JumpListIcons, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\JumpListIconsOld, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Extension Settings, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\User StyleSheets, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\data, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\about, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\apps, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\discovery, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\ftue, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\pageAction, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\loaders, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\bubbles, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\buttons, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\city, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\clean, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\disco, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\fishing, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\forest, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\mountains, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\planets, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sea, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\space, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\strips, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sunset, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\user, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ar, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\de, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\en, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\es, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\fr, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\he, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\it, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ja, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\nl, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\pl, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\pt_BR, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ru, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\tr, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_metadata, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],

LisaR · Dec 27, 2014

Files: 525
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.cartoontube.xxx_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.cliffsnotes.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.cliffsnotes.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.craigslist.org_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.craigslist.org_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.fling.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.fling.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.frostedminiwheats.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.history.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.history.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.ibtimes.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.ibtimes.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.imdb.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.imdb.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.inautonews.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.inautonews.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.indiedb.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.indiedb.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.kbb.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.kongregate.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.kongregate.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.latinpost.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.latinpost.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.lindseystoyroom.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.lindseystoyroom.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.msnbc.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.msnbc.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.nudevista.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.nudevista.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.pornhub.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.redtube.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.redtube.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.rollingstone.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.rollingstone.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.stickpage.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.stickpage.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.teaparty.org_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.teaparty.org_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.tubexclips.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.tubexclips.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.tv.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.tv.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.twitch.tv_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.washingtonpost.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.washingtonpost.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.wetplace.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.wetplace.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.xvideos.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.xvideos.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.xxl-sale.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.xxl-sale.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.youporn.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.youporn.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.yugiohcardmaker.net_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_www.yugiohcardmaker.net_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_yourlust.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_yourlust.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_yugioh.wikia.com_0.localstorage, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Local Storage\http_yugioh.wikia.com_0.localstorage-journal, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\000005.ldb, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\000008.ldb, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\000009.log, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\CURRENT, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\LOCK, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\LOG, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\LOG.old, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\Session Storage\MANIFEST-000007, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\Default\User StyleSheets\Custom.css, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\manifest.fingerprint, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\manifest.json, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_pnacl_json, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_crtbeginS_o, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_crtendS_o, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_eh_a, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran, C:\Users\Lisa Rey\AppData\Local\Vosteran\User Data\pnacl\0.1.0.12181\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe, Quarantined, [874de186d8a42610a8d168ee709317e9],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\background.html, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\manifest.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\newtab.html, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\opentab.html, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\comp.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\phone-frame.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\phone.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\0-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\0.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\1-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\1.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\2-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\2.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\3-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\3.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\4-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\4.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\5-mobile.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\facebook\images\carousel\screenshots\5.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\data\gallery.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\9gag.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\afterDownload.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\aim.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\aim_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\aliexpress.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\amazon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\apple.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\app_store.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\arto.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\aws.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\baidu.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\basecamp.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\bebo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\behance.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\bing.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blip.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blogger.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\bnter.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\booking.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\brightkite.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\castPlatform.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\cinch.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\cloudapp.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\coroflot.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\creative_commons.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\dailybooth.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\delicious.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\designfloat.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\designmoo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\deviantart.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\digg.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\digg_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\diigo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\dribbble.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\dropbox.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\drupal.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\dx.jpg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\dzone.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\ebay.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\ember.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\etsy.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\expedia.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\facebook.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\facebook.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\facebook_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\facebook_places.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\facto.me.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\feedburner.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\flickr.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\folkd.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\formspring.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\forrst.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\foursquare.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\foxtab.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\friendfeed.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\friendster.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\funmoods.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gameo.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gameo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gdgt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\github.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\github_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gmail.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\goodreads.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\goodWeather.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\google-drive.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\google_buzz.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\google_talk.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gowalla.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\gowalla_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\grooveshark.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\hacker_news.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\hi5.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\hype_machine.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\hyves.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\icq.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\identi.ca.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\designbump.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\evernote.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\google.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-linkedin.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\livejournal.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\newsvine.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\playstation.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\whatsapp.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\installCore.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\instapaper.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\ironSource.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-bizcards.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-confluence.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-employeeGuide.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-facebook.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-googleplus.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-jira.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-news.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-presence.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-signature.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\iS-twitter.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\itunes.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\jira.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\kik.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\krop.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],

LisaR · Dec 27, 2014

PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\kudosKit.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\last.fm.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\linkedin.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\linkedin_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\lovedsgn.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\meetup.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\metacafe.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\ming.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\mister_wong.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\mixx.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\mixx_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\mobileCore.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\mobileme.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\msn_messenger.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\myspace.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\myspace_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\netflix.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\noaa.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\nytimes.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\official.fm.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\openid.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\orkut.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\pandora.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\path.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\paypal.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\photobucket.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\picasa.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\picassa.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\pinboard.in.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\ping.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\pingchat.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\pivotal.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\plixi.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\plurk.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\podcast.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\posterous.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\qik.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\quik.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\quora.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\rdio.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\readernaut.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\reddit.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\retweet.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\robo.to.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\rss.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\salesforce.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\savefront.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\savefront.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\scribd.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\sharethis.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\simplenote.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\skype.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\slashdot.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\slideshare.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\smugmug.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\soundcloud.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\spearmintBrowser.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\spotify.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\spotsMagic.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\squarespace.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\squidoo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\steam.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\stumbleupon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\technorati.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\theweatherchannel.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\threewords.me.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\trello.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\tribe.net.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\tripadvisor.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\tripit.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\tumblr.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\tweaks-soft.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\twitter.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\twitter_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\twitter_old.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\vcard.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\viddler.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\vimeo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\virb.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\w3.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\weatherbug.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\wikipedia.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\windows.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\wists.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\wordpress.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\wordpress_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\xing.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\yahoo!_buzz.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\yahoo!_messenger.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\yahoo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\yelp.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\youtube.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\youtube_alt.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\zerply.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\zootool.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\zynga.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\amazon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\bestbuy.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\kmart.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\newegg.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\overstock.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\samsung.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\target.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\gallery\images\blackfriday\wallmart.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\clock-icon-small-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\clock-icon-small.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\cloud-icon-small-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\cloud-icon-small.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\icons-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\app\spots\weather\images\icons.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css\jquery-ui-1.10.3.custom.min.css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css\newtab.css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css\normalize.css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css\opentab.css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\css\opentab_global.css, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\close-btn.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\close_80x80.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\default-image-grey.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\default-image.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\default-image.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\powered-by-google.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\about\spotsbeta.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\apps\android-white.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\apps\download.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\apps\star.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\apps\star_full.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\add.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\chrome_apps.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\menu-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\profile.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\recently.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\search.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\searchb.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\clean\sms.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\discovery\arrow-down-active.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\discovery\arrow-down.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\discovery\discovery_facebook.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\add-item-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\add-item-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\arrow-down.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\arrow-up.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\edit-item-icon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\new-tab.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\plus-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\plus-white.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\favorites\remove-item-icon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\ftue\arrow-up.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\ftue\ftue-finish-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\ftue\ftue-phone.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\ftue\search-bar.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\128.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\16.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\48.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\arrow-down.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\logo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\v-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\whitelogo.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\x-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\pageAction\19x19.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\pageAction\19x19b.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\pageAction\38x38.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\icons\pageAction\38x38b.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\computer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\screenshot1.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\screenshot2.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\screenshot3.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\screenshot4.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\image-upload\warning.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\loaders\loader.swf, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\loaders\loader_white.swf, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\birthday-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\birthday.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\dismiss-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\dismiss-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\event-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\event.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\notifications\minimize.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\em-clean.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\!.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],

LisaR · Dec 27, 2014

PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\android-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\android.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\call-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\call.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\close-chat-clean.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\close-chat.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\contact-default-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\contact-default.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\contact-opacity.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\hangup-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\hangup-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\hangup.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone-welcome-dismiss-icon-clean.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone-welcome-dismiss-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone_icon-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone_icon.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone_preview-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\phone_preview.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\search-call-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\search-call-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\search-call.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\search-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\search.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\sms-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\sms-clean.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\phone\sms.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\plane.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\rating-star.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat\cat_1.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat\cat_2.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat\cat_3.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat\cat_4.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\review-gifs\cat\cat_5.gif, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\bookmark-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\bookmark-icon-white.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\calculator-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\calculator-icon-white.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\hangup.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\navigation-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\navigation-icon-white.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\phone_preview.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\plus-dark-sm.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\remove-dark-sm.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\search-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\search-icon-black.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\search-icon-white.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\search.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\sms.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\web-result-icon-black.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\search\web-result-icon-white.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\bubbles\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\bubbles\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\bubbles\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\buttons\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\buttons\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\buttons\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\city\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\city\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\city\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\clean\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\disco\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\disco\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\disco\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\fishing\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\fishing\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\fishing\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\forest\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\forest\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\forest\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\mountains\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\mountains\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\mountains\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\planets\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\planets\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\planets\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sea\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sea\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sea\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\space\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\space\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\space\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\strips\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\strips\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\strips\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sunset\bg.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sunset\footer.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\themes\sunset\thumb.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\user\login.svg, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\img\user\menu-icon.png, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\js\background.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\js\bootstrap.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\js\newtab.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\js\opentab.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\jquery.inview.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\aes.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\angular-animate.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\angular-route.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\angular.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\async.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\aws-sdk-2.0.0-rc9.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\eventsource.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\idbstore.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\jquery-2.1.1.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\jquery-ui-1.10.3.custom.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\js-canvas-to-blob.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\lodash.underscore.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\md5.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\mixins.loadash.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\moment-with-langs.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\moment.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\phoneformat.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\sortable.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\TweenMax.min.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\lib\utils.js, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_de.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_en.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_es.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_fr.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_he.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_it.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_ja.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_nl.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_pl.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_pt.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_ru.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\locales\i18n_tr.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ar\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\de\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\en\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\es\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\fr\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\he\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\it\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ja\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\nl\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\pl\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\pt_BR\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\ru\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_locales\tr\messages.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],
PUP.Optional.Vosteran.A, C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_1\_metadata\verified_contents.json, Quarantined, [e5ef3136c0bc76c0c4074019f60dc838],

Physical Sectors: 0
(No malicious items detected)

(end)

DDS gave me an error "DDS is not meant to run in 'Compatibility Mode'. I tried Note 1 and turned off Internet connection and disabled all virus protection programs, and it still gave error.

Broni · Dec 27, 2014

Welcome aboard

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

================================

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all the running programs
Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
Otherwise just double-click on RogueKiller.exe
Pre-scan will start. Let it finish.
Click on SCAN button.
Wait until the Status box shows Scan Finished
Click on Delete.
Wait until the Status box shows Deleting Finished.
Click on Report and copy/paste the content of the Notepad into your next reply.
RKreport.txt could also be found on your desktop.
If more than one log is produced post all logs.
If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

Create new restore point before proceeding with the next step....
How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

Download

Malwarebytes Anti-Rootkit (MBAR) to your desktop.

Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Double click on downloaded file. OK self extracting prompt.
MBAR will start. Click "Next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
- "mbar-log-{date} (xx-xx-xx).txt"
- "system-log.txt"

NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.

LisaR · Dec 27, 2014

RogueKiller V10.1.1.0 [Dec 23 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 8.1 (6.3.9200 ) 64 bits version
Started in : Normal mode
User : Lisa Rey [Administrator]
Mode : Delete -- Date : 12/27/2014 19:38:52

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 21 ¤¤¤
[PUM.Proxy] (X64) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Not selected
[PUM.Proxy] (X86) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Not selected
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Not selected
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Not selected
[PUM.Proxy] (X64) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:56332;https=127.0.0.1:56332 -> Not selected
[PUM.Proxy] (X86) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:56332;https=127.0.0.1:56332 -> Not selected
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:56332;https=127.0.0.1:56332 -> Not selected
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:56332;https=127.0.0.1:56332 -> Not selected
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.yahoo.com/?fr=hp-avast&type=iedef -> Not selected
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.yahoo.com/?fr=hp-avast&type=iedef -> Not selected
[PUM.SearchPage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 -> Not selected
[PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 -> Not selected
[PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{943AF0CF-D3D2-41D6-ACF6-09E4C496BDA3} | DhcpNameServer : 68.105.28.11 68.105.29.11 68.105.28.12 [UNITED STATES (US)][UNITED STATES (US)][UNITED STATES (US)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{943AF0CF-D3D2-41D6-ACF6-09E4C496BDA3} | DhcpNameServer : 68.105.28.11 68.105.29.11 68.105.28.12 [UNITED STATES (US)][UNITED STATES (US)][UNITED STATES (US)] -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:\Users\LISARE~1\AppData\Local\Linkey\IEEXTE~1\ietlb64.dll [x] -> Replaced ()
[Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : c:\users\lisare~1\appdata\local\linkey\ieexte~1\ietlb.dll [x] -> Replaced ()

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST500LT012-1DG142 +++++
--- User ---
[MBR] 46ab790c9aa76ce6bd7a46f52e52f3aa
[BSP] f391d92bcc35c66182aace62ccfbff3c : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097151 MB
User = LL1 ... OK
User = LL2 ... OK

============================================
RKreport_SCN_12272014_192811.log

LisaR · Dec 27, 2014

Nothing detected in MBAR

Broni · Dec 27, 2014

Please download ComboFix from Here, Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Never rename Combofix unless instructed.
Close any open browsers.
Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Close any open browsers.
WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
If the connection is not there use restore point you created prior to running Combofix.
Double click on combofix.exe & follow the prompts.

NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.

When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: https://www.techspot.com/downloads/5514-appremover.html
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.

Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try the following...

Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

Restart computer in safe mode

Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.

When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.

LisaR · Dec 27, 2014

I kept getting an error that "This operating system is not supported! ComboFix only runs on...Windows 2000 is no longer supported." I followed the steps and used rKill and it still gave me the same error afterwards. I am on Windows 8.1. Here is my rKill log:

Rkill 2.6.9 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/27/2014 08:51:40 PM in x64 mode.
Windows Version: Windows 8.1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 12/27/2014 08:53:33 PM
Execution time: 0 hours(s), 1 minute(s), and 52 seconds(s)

Broni · Dec 27, 2014

I'm sorry. My fault. Combofix won't run on Windows 8.1.

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.

LisaR · Dec 28, 2014

First run with Adware ended with an error that I didn't catch. Didn't reboot, didn't produce a log. I re-ran Adware and produced this log:

# AdwCleaner v4.106 - Report created 27/12/2014 at 22:23:25
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Lisa Rey - VIKI
# Running from : C:\Users\Lisa Rey\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Google Chrome v39.0.2171.71

*************************

AdwCleaner[R0].txt - [5887 octets] - [27/12/2014 22:01:57]
AdwCleaner[R1].txt - [1116 octets] - [27/12/2014 22:19:58]
AdwCleaner[S0].txt - [5089 octets] - [27/12/2014 22:05:02]
AdwCleaner[S1].txt - [1042 octets] - [27/12/2014 22:23:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1102 octets] ##########

LisaR · Dec 28, 2014

JRT had an error "Exception EAccessViolation in module ERUNT.EXE at 00003A38. Read of address 0076005D." but eventually ran and produced this log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 8.1 x64
Ran by Lisa Rey on Sat 12/27/2014 at 22:41:14.60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL

~~~ Registry Keys

~~~ Files

Successfully deleted: [File] "C:\Users\Lisa Rey\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Lisa Rey\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal"
Successfully deleted: [File] C:\WINDOWS\prefetch\GOOGLETOOLBARMANAGER_8CA8B414-7F3BB7E1.pf
Successfully deleted: [File] C:\WINDOWS\prefetch\GOOGLETOOLBARNOTIFIER.EXE-CE1A1775.pf
Successfully deleted: [File] C:\WINDOWS\prefetch\GOOGLETOOLBARUSER_32.EXE-CB694AEC.pf

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\Lisa Rey\AppData\Roaming\pcdr"
Successfully deleted: [Folder] "C:\Users\Lisa Rey\appdata\local\pro_pc_cleaner"
Successfully deleted: [Folder] "C:\Users\Lisa Rey\documents\propccleaner"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 12/27/2014 at 22:50:11.98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

LisaR · Dec 28, 2014

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2014
Ran by Lisa Rey (administrator) on VIKI on 27-12-2014 23:02:40
Running from C:\Users\Lisa Rey\Desktop
Loaded Profile: Lisa Rey (Available profiles: Lisa Rey)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(MicroStudio) C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(MicroTools) C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILAE.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-06-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321176 2013-06-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321176 2013-06-28] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5762408 2013-03-05] (Dell Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-11] (Synaptics Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-12-20] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-05-02] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\Run: [Facebook Update] => C:\Users\Lisa Rey\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-08] (Facebook Inc.)
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATILAE.EXE [297024 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\MountPoints2: {30863a26-825f-11e4-be8b-f82fa8cf797c} - "E:\TL-Bootstrap.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:56332;https=127.0.0.1:56332
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com/?fr=hp-avast&type=iedef
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://search.yahoo.com/yhs/search?type=iedef&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3071963366-82540369-3713777275-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-3071963366-82540369-3713777275-1001 -> {A04D935A-1590-498E-BA3D-B79A7633A952} URL =
SearchScopes: HKU\S-1-5-21-3071963366-82540369-3713777275-1001 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = https://search.yahoo.com/search?fr=..._publisherid=355_141211__yaie&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3071963366-82540369-3713777275-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Lisa Rey\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-29]
FF HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\Firefox\Extensions: [{8066EED7-CFA6-BEBE-4904-3D4106F332A7}] - C:\Program Files (x86)\ver1BlockAndSurf\185.xpi

Chrome:
=======
CHR HomePage: Default -> hxxp://Vosteran.com/?f=1&a=vst_cmi_14_50_ie&cd=2XzuyEtN2Y1L1Qzu0F0AtB0F0Azz0C0FyBzyyB0ByE0CyD0CtN0D0Tzu0StCtDyByCtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyDzzyBzyzztByB0EtG0D0ByEtCtGzyzz0CtCtGtDtCzyyDtGyEyDtC0B0FyEyD0Czy0C0EyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtA0Bzz0ByB0B0CtG0DtDtAtDtGyE0FzyyBtG0BzztBtCtGyBtB0E0DyC0AyB0C0D0A0Bzz2Q&cr=1939495008&ir=
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> www.yahoo.com
CHR DefaultSearchURL: Default -> https://search.yahoo.com/yhs/search?type=iedef&hspart=avast&hsimp=yhs-001&p={searchTerms}
CHR DefaultSuggestURL: Default -> http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
CHR Profile: C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-29]
CHR Extension: (Google Drive) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-29]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-27]
CHR Extension: (YouTube) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-29]
CHR Extension: (Google Search) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-29]
CHR Extension: (Techgile) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\lebajhdnpglaboiijodgbloglmddhhag [2014-12-12]
CHR Extension: (Google Wallet) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-29]
CHR Extension: (Gmail) - C:\Users\Lisa Rey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-29]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-20]
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-20] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-20] (Avast Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-10-21] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1924328 2014-09-18] (SoftThinks SAS)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-12-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-12-07] (Microsoft Corporation)
R2 WindowsVNT_R3; C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe [2973600 2014-10-20] (MicroStudio) [File not signed]
R2 YouTubeDownload_P2; C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe [2967160 2014-11-01] (MicroTools)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-20] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-20] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-20] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-20] ()
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-10-21] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [9525936 2013-10-21] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-11] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-11] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2014-12-27] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-20] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-12-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 23:02 - 2014-12-27 23:03 - 00022312 _____ () C:\Users\Lisa Rey\Desktop\FRST.txt
2014-12-27 23:00 - 2014-12-27 23:02 - 00000000 ____D () C:\FRST
2014-12-27 22:58 - 2014-12-27 22:58 - 02122752 _____ (Farbar) C:\Users\Lisa Rey\Desktop\FRST64.exe
2014-12-27 22:50 - 2014-12-27 22:50 - 00001617 _____ () C:\Users\Lisa Rey\Desktop\JRT.txt
2014-12-27 22:42 - 2014-12-27 22:42 - 00000247 _____ () C:\WINDOWS\system32\2014-12-28-05-42-17.032-aswFe.exe-3444.log
2014-12-27 22:36 - 2014-12-27 22:41 - 00000247 _____ () C:\WINDOWS\system32\2014-12-28-05-36-55.043-aswFe.exe-6640.log
2014-12-27 22:36 - 2014-12-27 22:36 - 00000197 _____ () C:\WINDOWS\system32\2014-12-28-05-36-52.060-AvastVBoxSVC.exe-5092.log
2014-12-27 22:31 - 2014-12-27 22:31 - 01707646 _____ (Thisisu) C:\Users\Lisa Rey\Desktop\JRT.exe
2014-12-27 22:11 - 2014-12-27 22:11 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Local\CrashDumps
2014-12-27 22:01 - 2014-12-27 22:23 - 00000000 ____D () C:\AdwCleaner
2014-12-27 21:59 - 2014-12-27 21:59 - 02173952 _____ () C:\Users\Lisa Rey\Desktop\adwcleaner_4.106.exe
2014-12-27 20:51 - 2014-12-27 20:53 - 00002190 _____ () C:\Users\Lisa Rey\Desktop\Rkill.txt
2014-12-27 20:49 - 2014-12-27 20:49 - 01940728 _____ (Bleeping Computer, LLC) C:\Users\Lisa Rey\Desktop\rkill.exe
2014-12-27 20:41 - 2014-12-27 20:42 - 00000197 _____ () C:\WINDOWS\system32\2014-12-28-03-41-51.002-AvastVBoxSVC.exe-3304.log
2014-12-27 19:45 - 2014-12-27 20:09 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-12-27 19:42 - 2014-12-27 20:09 - 00000000 ____D () C:\Users\Lisa Rey\Desktop\mbar
2014-12-27 19:41 - 2014-12-27 19:41 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Lisa Rey\Desktop\mbar-1.08.2.1001.exe
2014-12-27 19:21 - 2014-12-27 19:21 - 00035064 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys
2014-12-27 19:21 - 2014-12-27 19:21 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-12-27 19:18 - 2014-12-27 19:18 - 15298136 _____ () C:\Users\Lisa Rey\Desktop\RogueKiller.exe
2014-12-27 19:07 - 2014-12-27 19:07 - 00000247 _____ () C:\WINDOWS\system32\2014-12-28-02-07-16.023-aswFe.exe-4336.log
2014-12-27 18:57 - 2014-12-27 19:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-28-01-57-32.008-aswFe.exe-6292.log
2014-12-27 18:57 - 2014-12-27 18:57 - 00000197 _____ () C:\WINDOWS\system32\2014-12-28-01-57-28.006-AvastVBoxSVC.exe-4876.log
2014-12-27 18:49 - 2014-12-27 18:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-12-27 18:49 - 2014-12-27 18:49 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-12-27 17:37 - 2014-12-27 22:24 - 00646034 _____ () C:\WINDOWS\PFRO.log
2014-12-27 17:34 - 2014-12-27 17:35 - 00688992 _____ (Swearware) C:\Users\Lisa Rey\Desktop\dds.com
2014-12-27 16:52 - 2014-12-27 22:25 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-27 16:52 - 2014-12-27 16:52 - 00001116 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-27 16:52 - 2014-12-27 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-27 16:51 - 2014-12-27 19:42 - 00096472 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-12-27 16:51 - 2014-12-27 16:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-27 16:51 - 2014-12-27 16:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-27 16:51 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-12-27 16:51 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-12-27 16:49 - 2014-12-27 16:49 - 00000681 _____ () C:\WINDOWS\setupact.log
2014-12-27 16:49 - 2014-12-27 16:49 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-27 16:47 - 2014-12-27 16:47 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Lisa Rey\Desktop\mbam-setup-2.0.4.1028.exe
2014-12-22 21:40 - 2014-12-22 21:40 - 00003100 _____ () C:\WINDOWS\System32\Tasks\{A81D0A3F-ADCD-4B95-B296-9FA9895A76E4}
2014-12-20 13:26 - 2014-10-30 04:25 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-12-20 13:22 - 2014-12-20 13:22 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-20 13:22 - 2014-12-20 13:22 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-20 13:22 - 2014-12-20 13:22 - 00001982 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-12-20 13:08 - 2014-12-20 13:08 - 00000032 _____ () C:\ProgramData\Temp.log
2014-12-20 12:23 - 2014-12-20 12:23 - 00000046 _____ () C:\Users\Lisa Rey\AppData\Roaming\WB.CFG
2014-12-12 17:58 - 2014-10-30 15:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-12 17:58 - 2014-10-30 15:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-12 17:37 - 2014-12-12 17:37 - 00000000 ____D () C:\Users\Lisa Rey\.android
2014-12-12 17:34 - 2014-12-12 17:34 - 00000144 _____ () C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-12 17:33 - 2014-12-12 17:33 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2014-12-12 17:33 - 2014-11-26 14:10 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-12-12 17:33 - 2014-11-26 14:10 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-12 17:28 - 2014-12-12 17:28 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-12 14:38 - 2014-12-12 14:38 - 00000000 ____D () C:\ProgramData\Unchecky
2014-12-11 17:42 - 2014-12-11 17:42 - 00000000 ____D () C:\ProgramData\Windows VXM
2014-12-11 17:42 - 2014-12-11 17:42 - 00000000 ____D () C:\Program Files (x86)\Windows Network Accelerater
2014-12-11 17:41 - 2014-12-11 17:42 - 00000000 ____D () C:\ProgramData\Optimizer
2014-12-11 17:41 - 2014-12-11 17:41 - 00000000 ____D () C:\Program Files (x86)\YouTube Downloader Services
2014-12-11 16:58 - 2014-12-27 17:37 - 00000000 ____D () C:\ProgramData\NLCOsUrDn
2014-12-11 16:07 - 2014-12-11 16:09 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Roaming\GetNowUpdater
2014-12-11 16:07 - 2014-12-11 16:07 - 00001066 _____ () C:\Users\Lisa Rey\Desktop\GetNowUpdater.lnk
2014-12-11 16:06 - 2014-12-11 16:11 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Local\GetNowUpdater
2014-12-11 16:04 - 2014-12-20 12:46 - 00000000 ____D () C:\searchplugins
2014-12-11 16:04 - 2014-12-11 16:04 - 00000264 _____ () C:\prefs.js
2014-12-11 16:03 - 2014-12-11 16:03 - 00004720 _____ () C:\WINDOWS\SysWOW64\LavasoftTcpService.ini
2014-12-11 16:03 - 2014-12-11 16:03 - 00002552 _____ () C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
2014-12-11 16:03 - 2014-12-11 16:03 - 00002552 _____ () C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2014-12-11 16:03 - 2014-11-27 10:44 - 00358736 _____ (Lavasoft Limited) C:\WINDOWS\system32\LavasoftTcpService64.dll
2014-12-11 16:03 - 2014-11-27 10:44 - 00312424 _____ (Lavasoft Limited) C:\WINDOWS\SysWOW64\LavasoftTcpService.dll
2014-12-11 16:02 - 2014-12-27 17:31 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Roaming\Angry_Birds
2014-12-11 16:02 - 2014-12-11 16:02 - 00001866 _____ () C:\Users\Lisa Rey\Desktop\Angry_Birds.lnk
2014-12-11 14:32 - 2014-12-27 22:32 - 00000929 _____ () C:\WINDOWS\Tasks\EPSON XP-410 Series Update {3F6985CD-B718-48A2-9443-68D18AE02B6B}.job
2014-12-11 14:32 - 2014-12-27 22:32 - 00000743 _____ () C:\WINDOWS\Tasks\EPSON XP-410 Series Invitation {3F6985CD-B718-48A2-9443-68D18AE02B6B}.job
2014-12-11 14:32 - 2014-12-11 14:32 - 00003960 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-410 Series Update {3F6985CD-B718-48A2-9443-68D18AE02B6B}
2014-12-11 14:32 - 2014-12-11 14:32 - 00003774 _____ () C:\WINDOWS\System32\Tasks\EPSON XP-410 Series Invitation {3F6985CD-B718-48A2-9443-68D18AE02B6B}
2014-12-11 14:32 - 2014-08-14 17:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-12-10 15:14 - 2014-11-09 19:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-10 15:14 - 2014-11-09 18:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-10 15:13 - 2014-10-30 16:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-10 15:13 - 2014-10-30 16:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-10 14:56 - 2014-06-09 15:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-12-10 14:56 - 2014-06-09 15:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-12-10 14:56 - 2014-05-02 22:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-12-10 14:56 - 2014-05-02 22:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-12-10 14:56 - 2014-05-02 22:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-12-10 14:56 - 2014-05-02 22:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-12-10 14:56 - 2014-05-02 21:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-12-10 14:56 - 2014-05-02 21:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-12-10 14:56 - 2014-05-02 21:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-12-10 14:56 - 2014-05-02 16:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-12-10 14:56 - 2014-04-29 23:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-12-10 14:56 - 2014-04-29 23:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-12-10 14:56 - 2014-04-29 23:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-12-10 14:56 - 2014-04-29 23:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-12-10 14:56 - 2014-04-29 22:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-12-10 14:56 - 2014-04-29 21:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-12-10 14:56 - 2014-04-29 21:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-12-10 14:56 - 2014-04-29 21:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-12-10 14:56 - 2014-04-29 21:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-12-10 14:56 - 2014-04-29 21:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-12-10 14:56 - 2014-04-29 21:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-12-10 14:56 - 2014-04-29 20:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-12-10 14:56 - 2014-04-29 20:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-12-10 14:56 - 2014-04-29 20:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-12-10 14:56 - 2014-04-29 20:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-12-10 14:56 - 2014-04-29 20:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-12-10 14:56 - 2014-04-29 20:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-12-10 14:56 - 2014-04-28 15:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-12-10 14:56 - 2014-04-26 09:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-12-10 14:56 - 2014-04-14 02:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-12-10 14:56 - 2014-04-14 01:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-12-10 14:56 - 2014-04-13 22:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-12-10 14:55 - 2014-11-06 21:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-10 14:55 - 2014-11-06 20:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-10 14:55 - 2014-08-23 00:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-12-10 14:55 - 2014-08-23 00:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-12-10 14:55 - 2014-08-22 23:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-12-10 14:55 - 2014-08-22 22:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-12-10 14:55 - 2014-08-22 21:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-12-10 14:55 - 2014-08-15 21:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-12-10 14:55 - 2014-08-15 21:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-12-10 14:55 - 2014-08-15 20:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-12-10 14:55 - 2014-08-15 20:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-12-10 14:55 - 2014-08-15 20:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-12-10 14:55 - 2014-08-15 18:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-12-10 14:55 - 2014-08-15 18:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-12-10 14:55 - 2014-08-15 17:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-12-10 14:55 - 2014-08-15 17:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-12-10 14:55 - 2014-08-15 17:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-12-10 14:55 - 2014-08-15 17:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-12-10 14:55 - 2014-08-15 17:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-12-10 14:55 - 2014-08-15 17:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-12-10 14:55 - 2014-08-15 17:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-12-10 14:55 - 2014-08-15 17:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-12-10 14:55 - 2014-08-15 17:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-10 14:55 - 2014-08-15 17:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-12-10 14:55 - 2014-08-15 17:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-12-10 14:55 - 2014-08-15 17:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-12-10 14:55 - 2014-08-15 17:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-10 14:55 - 2014-08-15 17:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-12-10 14:55 - 2014-08-15 17:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-12-10 14:55 - 2014-08-15 17:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-12-10 14:55 - 2014-08-15 17:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-12-10 14:55 - 2014-08-15 17:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-12-10 14:55 - 2014-08-15 17:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-12-10 14:55 - 2014-08-15 17:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-12-10 14:55 - 2014-08-15 17:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-12-10 14:55 - 2014-08-15 17:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-12-10 14:55 - 2014-08-15 17:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-12-10 14:54 - 2014-12-03 16:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-10 14:54 - 2014-12-03 16:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-10 14:54 - 2014-12-02 16:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-10 14:54 - 2014-12-02 16:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-10 14:54 - 2014-12-02 16:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-10 14:54 - 2014-12-02 16:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-10 14:54 - 2014-12-02 16:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-10 14:54 - 2014-10-31 16:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-10 14:54 - 2014-10-31 16:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-10 14:54 - 2014-08-01 17:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-12-10 14:54 - 2014-07-15 11:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-12-10 14:54 - 2014-07-15 01:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-12-10 14:54 - 2014-07-15 01:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-12-10 14:54 - 2014-07-15 01:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-12-10 14:54 - 2014-07-09 21:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-12-10 14:54 - 2014-06-01 19:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-12-10 14:54 - 2014-05-30 23:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-12-10 14:54 - 2014-05-30 23:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-12-10 14:54 - 2014-05-30 21:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-12-10 14:54 - 2014-05-30 21:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-12-10 14:54 - 2014-05-30 21:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-12-10 14:54 - 2014-05-27 02:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-12-10 14:54 - 2014-05-27 02:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-12-10 14:49 - 2014-11-21 20:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-10 14:49 - 2014-11-21 19:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-10 14:49 - 2014-11-21 19:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-10 14:49 - 2014-11-21 19:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-10 14:49 - 2014-11-21 19:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-10 14:49 - 2014-11-21 19:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-10 14:49 - 2014-11-21 19:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-10 14:49 - 2014-11-21 19:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-10 14:49 - 2014-11-21 19:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-10 14:49 - 2014-11-21 19:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-10 14:49 - 2014-11-21 19:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-10 14:49 - 2014-11-21 19:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-10 14:49 - 2014-11-21 19:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-10 14:49 - 2014-11-21 19:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-10 14:49 - 2014-11-21 19:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-10 14:49 - 2014-11-21 18:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-10 14:49 - 2014-11-21 18:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-10 14:49 - 2014-11-21 18:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-10 14:49 - 2014-11-21 18:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-10 14:49 - 2014-11-21 18:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-10 14:49 - 2014-11-21 18:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-10 14:49 - 2014-11-21 18:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-10 14:49 - 2014-11-21 18:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-10 14:49 - 2014-11-21 18:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-10 14:49 - 2014-11-21 18:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-10 14:49 - 2014-11-21 18:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-10 14:49 - 2014-11-21 18:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-10 14:49 - 2014-11-21 18:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-10 14:49 - 2014-11-21 18:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-10 14:49 - 2014-11-21 18:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-10 14:49 - 2014-11-21 18:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-10 14:49 - 2014-11-21 18:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-10 14:49 - 2014-11-21 18:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-10 14:49 - 2014-11-21 18:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-10 14:49 - 2014-11-21 18:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-10 14:49 - 2014-11-21 18:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-10 14:49 - 2014-11-21 18:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-10 14:49 - 2014-11-21 17:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-10 14:49 - 2014-11-21 17:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-10 14:49 - 2014-07-23 20:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-12-10 14:49 - 2014-07-23 20:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-12-10 14:48 - 2014-07-11 21:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

LisaR · Dec 28, 2014

2014-12-09 14:32 - 2014-12-27 22:55 - 00003922 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{37FA7C83-54CD-4057-B1C3-53CB3AD854C9}
2014-12-09 14:32 - 2014-12-09 14:32 - 00000000 __SHD () C:\Users\Lisa Rey\AppData\Local\EmieUserList
2014-12-09 14:32 - 2014-12-09 14:32 - 00000000 __SHD () C:\Users\Lisa Rey\AppData\Local\EmieSiteList
2014-12-09 14:32 - 2014-12-09 14:32 - 00000000 __SHD () C:\Users\Lisa Rey\AppData\Local\EmieBrowserModeList
2014-12-08 14:36 - 2014-12-08 14:36 - 00001444 _____ () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-08 14:36 - 2014-12-08 14:36 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-12-08 14:36 - 2014-12-08 14:36 - 00000020 ___SH () C:\Users\Lisa Rey\ntuser.ini
2014-12-07 21:38 - 2014-12-20 12:48 - 00000000 ___DC () C:\WINDOWS\Panther
2014-12-07 21:38 - 2014-12-07 21:38 - 00000000 __SHD () C:\Recovery
2014-12-07 21:37 - 2014-12-07 21:37 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-12-07 21:37 - 2014-12-07 21:37 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-12-07 21:37 - 2014-12-07 21:37 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-07 21:36 - 2014-12-07 21:36 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-07 21:36 - 2014-12-07 21:36 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-12-07 21:36 - 2014-12-07 21:36 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-07 21:36 - 2014-12-07 21:36 - 00054592 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll
2014-12-07 21:36 - 2014-12-07 21:36 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-12-07 21:35 - 2014-12-07 21:35 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-12-07 21:35 - 2014-12-07 21:35 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-12-07 21:34 - 2014-12-07 21:34 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-12-07 21:34 - 2014-12-07 21:34 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-12-07 21:34 - 2014-12-07 21:34 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-12-07 21:34 - 2014-12-07 21:34 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-12-07 21:32 - 2014-12-07 21:32 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-12-07 21:32 - 2014-12-07 21:32 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-12-07 21:32 - 2014-12-07 21:32 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-12-07 21:32 - 2014-12-07 21:32 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-12-07 21:32 - 2014-12-07 21:32 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-12-07 21:32 - 2014-12-07 21:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-12-07 21:32 - 2014-12-07 21:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-12-07 21:32 - 2014-12-07 21:32 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-12-07 21:31 - 2014-12-07 21:31 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-12-07 21:31 - 2014-12-07 21:31 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-12-07 21:31 - 2014-12-07 21:31 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-12-07 21:31 - 2014-12-07 21:31 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-12-07 21:31 - 2014-12-07 21:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-12-07 21:30 - 2014-12-07 21:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-12-07 21:30 - 2014-12-07 21:30 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-12-07 21:21 - 2014-12-07 21:21 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-12-07 21:21 - 2014-12-07 21:21 - 00000000 ____D () C:\Program Files\MSBuild
2014-12-07 21:21 - 2014-12-07 21:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-12-07 21:21 - 2014-12-07 21:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-12-07 21:21 - 2013-08-02 21:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-12-07 21:21 - 2013-08-02 21:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-07 21:20 - 2013-08-02 21:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-12-07 21:20 - 2013-08-02 21:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-07 21:11 - 2014-12-27 21:13 - 01441841 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-07 21:10 - 2014-12-07 21:10 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-12-07 20:59 - 2014-12-07 20:59 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-12-07 20:55 - 2014-12-07 20:55 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-12-07 20:54 - 2014-12-07 21:11 - 00022863 _____ () C:\WINDOWS\diagwrn.xml
2014-12-07 20:54 - 2014-12-07 21:11 - 00022863 _____ () C:\WINDOWS\diagerr.xml
2014-12-07 20:53 - 2014-12-12 17:37 - 00000000 ____D () C:\Users\Lisa Rey
2014-12-07 20:53 - 2014-12-07 20:54 - 00000000 ___RD () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-07 20:53 - 2014-12-07 20:54 - 00000000 ___RD () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-07 20:53 - 2014-09-24 00:23 - 00000369 _____ () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-07 20:53 - 2014-09-24 00:23 - 00000369 _____ () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-07 20:53 - 2013-08-22 08:36 - 00000000 ___RD () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-07 20:53 - 2013-08-22 08:36 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-07 20:44 - 2014-12-07 20:44 - 00849474 _____ () C:\WINDOWS\system32\Drivers\rtwavesskdy.dat
2014-12-07 20:44 - 2014-12-07 20:44 - 00188517 _____ () C:\WINDOWS\system32\Drivers\RTWAVES40.dat
2014-12-07 20:44 - 2014-12-07 20:44 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-12-07 20:43 - 2014-12-07 20:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-12-07 20:43 - 2014-12-07 20:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-12-07 20:43 - 2014-12-07 20:43 - 00000000 ____D () C:\Program Files\Realtek
2014-12-07 20:42 - 2014-12-07 20:58 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-12-07 20:41 - 2014-12-07 20:41 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-12-07 20:41 - 2014-12-07 20:41 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-12-07 20:41 - 2014-12-07 20:41 - 00000000 ____D () C:\Program Files\Synaptics
2014-12-07 20:41 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-12-07 20:41 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-27 23:01 - 2014-08-17 10:01 - 00000929 _____ () C:\WINDOWS\Tasks\EPSON XP-410 Series Update {4480F0E6-B957-48E8-A1F5-74B242C979D4}.job
2014-12-27 23:01 - 2014-08-17 10:01 - 00000743 _____ () C:\WINDOWS\Tasks\EPSON XP-410 Series Invitation {4480F0E6-B957-48E8-A1F5-74B242C979D4}.job
2014-12-27 23:00 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-27 22:57 - 2014-04-29 19:09 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-27 22:55 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-27 22:50 - 2014-03-02 13:44 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3071963366-82540369-3713777275-1001
2014-12-27 22:38 - 2014-05-08 20:33 - 00000950 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001UA.job
2014-12-27 22:38 - 2014-05-08 20:33 - 00000928 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001Core.job
2014-12-27 22:33 - 2014-01-04 01:36 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-12-27 22:32 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2014-12-27 22:31 - 2014-09-24 00:15 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-27 22:27 - 2014-04-29 18:49 - 00000916 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-27 22:26 - 2014-04-29 18:52 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-27 22:25 - 2014-04-29 18:49 - 00000912 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-27 22:24 - 2013-08-22 07:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-27 20:38 - 2013-08-22 06:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-27 17:37 - 2014-04-29 18:50 - 00000000 ____D () C:\Program Files\Google
2014-12-27 17:37 - 2014-04-29 18:49 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-27 17:37 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-12-27 17:02 - 2014-03-02 13:49 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-20 14:53 - 2014-01-04 01:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-20 13:22 - 2014-04-29 19:08 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-20 13:22 - 2014-04-29 19:08 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-20 13:18 - 2014-03-02 14:43 - 00001428 _____ () C:\ProgramData\hpzinstall.log
2014-12-20 13:14 - 2014-01-04 01:30 - 00000000 ____D () C:\ProgramData\CyberLink
2014-12-20 13:14 - 2014-01-04 01:30 - 00000000 ____D () C:\ProgramData\CLSK
2014-12-20 12:54 - 2014-04-29 18:49 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Local\Google
2014-12-20 12:45 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-20 12:43 - 2012-07-26 00:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-12 17:42 - 2012-07-25 22:26 - 00000261 _____ () C:\WINDOWS\win.ini
2014-12-12 17:30 - 2014-11-09 17:42 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2014-12-12 17:28 - 2014-09-24 02:50 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-12 17:28 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-12 17:25 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy
2014-12-11 17:02 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-11 14:29 - 2014-03-02 13:35 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Local\Packages
2014-12-10 17:09 - 2014-03-03 19:33 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-10 17:05 - 2014-03-03 19:33 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-10 16:50 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-12-07 21:37 - 2013-08-22 08:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-12-07 21:35 - 2013-08-22 08:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-07 21:35 - 2013-08-22 08:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-07 21:35 - 2013-08-22 08:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-07 21:35 - 2013-08-22 08:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-07 21:32 - 2013-08-22 08:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-12-07 21:32 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-12-07 21:32 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-12-07 21:11 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-07 21:08 - 2013-08-22 08:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-12-07 21:08 - 2013-08-22 08:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-07 21:07 - 2014-01-04 01:32 - 00880342 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-12-07 21:03 - 2013-08-22 07:44 - 00381280 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-12-07 21:01 - 2014-08-17 09:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-12-07 21:01 - 2014-07-30 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-07 21:01 - 2014-06-25 00:19 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2014-12-07 21:01 - 2014-04-29 19:15 - 00000000 ____D () C:\Users\Lisa Rey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-07 21:01 - 2014-04-29 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-07 21:01 - 2014-04-29 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-07 21:01 - 2014-03-08 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-12-07 21:01 - 2014-03-02 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-07 21:01 - 2014-03-02 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-07 21:01 - 2014-01-04 01:40 - 00000000 ____D () C:\WINDOWS\en
2014-12-07 21:01 - 2014-01-04 01:28 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2014-12-07 21:01 - 2014-01-04 01:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-12-07 21:01 - 2013-08-22 06:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-12-07 21:01 - 2013-08-22 06:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-07 20:59 - 2014-09-23 23:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-12-07 20:59 - 2014-09-23 23:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-12-07 20:59 - 2014-09-23 23:33 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-12-07 20:59 - 2014-03-02 14:47 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2014-12-07 20:59 - 2014-01-04 01:24 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-12-07 20:59 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-12-07 20:59 - 2013-08-22 06:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-12-07 20:59 - 2013-08-22 06:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-12-07 20:59 - 2012-07-25 22:37 - 00000000 ____D () C:\Users\Default.migrated
2014-12-07 20:58 - 2014-08-17 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-12-07 20:58 - 2014-03-02 13:35 - 00000000 ____D () C:\ProgramData\PRICache
2014-12-07 20:58 - 2013-08-22 08:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-12-07 20:58 - 2013-08-22 08:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-12-07 20:58 - 2013-08-22 08:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-12-07 20:58 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\Help
2014-12-07 20:58 - 2013-08-22 08:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-07 20:55 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-12-07 20:39 - 2013-08-22 06:36 - 00000000 __RHD () C:\Users\Default
2014-12-04 18:21 - 2012-07-26 01:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

Files to move or delete:
====================
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE.dat
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE1.dat
C:\Users\Lisa Rey\random.dat

Some content of TEMP:
====================
C:\Users\Lisa Rey\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Lisa Rey\AppData\Local\Temp\Quarantine.exe
C:\Users\Lisa Rey\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-12-27 22:51

==================== End Of Log ============================

LisaR · Dec 28, 2014

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2014
Ran by Lisa Rey at 2014-12-27 23:03:44
Running from C:\Users\Lisa Rey\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

1310 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
1310_Help (x32 Version: 82.0.58.000 - Hewlett-Packard) Hidden
1310Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
AIO_CDB_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)
Dell Product Registration (HKLM-x32\...\{2A0F2CC5-3065-492C-8380-B03AA7106B1A}) (Version: 1.16.1 - Dell Inc.)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.1 - Synaptics Incorporated)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
DSC/AA Factory Installer (Version: 3.4.6299.48 - PC-Doctor, Inc.) Hidden
DW WLAN Card (HKLM\...\DW WLAN Card) (Version: 6.30.223.99 - Dell Inc.)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-410 Series Printer Uninstall (HKLM\...\EPSON XP-410 Series) (Version: - SEIKO EPSON Corporation)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\OneDriveSetup.exe) (Version: 17.0.4029.0217 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.018 - Dell Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6959 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
VirtualDJ Home FREE (HKLM-x32\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.7850 - Broadcom Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3071963366-82540369-3713777275-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lisa Rey\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

==================== Restore Points =========================

10-12-2014 16:50:51 Windows Update
20-12-2014 12:39:29 Windows Update
27-12-2014 20:32:41 Restore Point 1

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2014-12-20 12:59 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {12FD3214-2C57-43AC-B8D4-C6AE5B0B82FE} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {15FB4098-E15F-4684-8CCA-FD6A6FD80BB0} - System32\Tasks\EPSON XP-410 Series Update {3F6985CD-B718-48A2-9443-68D18AE02B6B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {440908D4-6917-4328-BD72-AE2A09F7C734} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001Core => C:\Users\Lisa Rey\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-08] (Facebook Inc.)
Task: {455A321A-CE6A-4290-AA6D-B20D0E77C926} - System32\Tasks\{A81D0A3F-ADCD-4B95-B296-9FA9895A76E4} => pcalua.exe -a C:\ProgramData\ZombieNews\uninstall.exe -c /kb=y /ic=1
Task: {52C7FDFF-9BA3-45B2-B458-15D865A67725} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {5B5D2FA9-AE80-4D20-9DAF-A48A591B96CD} - System32\Tasks\Dell\Dell System Registration => C:\Program Files (x86)\System Registration\prodreg.exe [2012-07-09] (Dell, Inc.)
Task: {6D54BD03-3847-4A6C-A112-CD9A595CAF25} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-12-10] (Microsoft Corporation)
Task: {738183BC-7980-448E-93D6-928E7109FFD9} - System32\Tasks\EPSON XP-410 Series Invitation {4480F0E6-B957-48E8-A1F5-74B242C979D4} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {79425B85-7FD5-4305-82D3-2B72D91C7A6D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9384B29B-5EC4-4DAD-B2CA-090BC12D2710} - System32\Tasks\EPSON XP-410 Series Update {4480F0E6-B957-48E8-A1F5-74B242C979D4} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {950A42BB-E5B1-43CF-9E03-3278EC004944} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001UA => C:\Users\Lisa Rey\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-08] (Facebook Inc.)
Task: {99FBC62E-164B-4BCE-9C5E-60B9E03FAC1F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-29] (Google Inc.)
Task: {A0E74CA2-345C-480D-8C35-E9C8E36AA92C} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {A91389C7-32DC-4E63-AC5D-BD273E75357D} - System32\Tasks\EPSON XP-410 Series Invitation {3F6985CD-B718-48A2-9443-68D18AE02B6B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {AEAD36F0-6280-4FDE-83CE-47A9FB005F31} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-29] (Google Inc.)
Task: {DC176DD4-74F5-411A-9557-D72FD2770D42} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-11] (Synaptics Incorporated)
Task: {E57C212F-016A-455A-9519-D7FE70004E76} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {E7CC5CBB-F2F7-49F6-9074-5FEC7017355B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-20] (AVAST Software)
Task: {EB4DDA45-49FC-41F9-8FBA-3FAAA1D3D512} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: C:\WINDOWS\Tasks\EPSON XP-410 Series Invitation {3F6985CD-B718-48A2-9443-68D18AE02B6B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-410 Series Invitation {4480F0E6-B957-48E8-A1F5-74B242C979D4}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-410 Series Update {3F6985CD-B718-48A2-9443-68D18AE02B6B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-410 Series Update {4480F0E6-B957-48E8-A1F5-74B242C979D4}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLAE.EXE
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001Core.job => C:\Users\Lisa Rey\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3071963366-82540369-3713777275-1001UA.job => C:\Users\Lisa Rey\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-09-04 21:13 - 2013-09-04 21:13 - 00049368 _____ () c:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2014-08-16 16:26 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-20 13:22 - 2014-12-20 13:22 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-20 13:22 - 2014-12-20 13:22 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-09-18 11:37 - 2014-07-02 19:55 - 00487144 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
2014-11-21 14:57 - 2014-09-23 06:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-12-27 17:40 - 2014-12-27 17:40 - 02908160 _____ () C:\Program Files\AVAST Software\Avast\defs\14122701\algo.dll
2014-12-20 13:22 - 2014-12-20 13:22 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 19:58 - 2014-02-12 19:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-21 14:51 - 2014-11-21 14:51 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2014-12-20 13:22 - 2014-12-20 13:22 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-20 13:03 - 2014-12-20 13:03 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\2133a50009fa3b357bfbd29a218be0f6\PSIClient.ni.dll
2014-01-04 01:24 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-09-18 11:37 - 2014-07-30 15:37 - 01906464 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll
2014-01-04 01:37 - 2012-11-26 00:19 - 01153384 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll
2014-09-18 11:37 - 2012-11-25 22:19 - 00117608 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll
2014-11-26 12:28 - 2014-11-24 23:39 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
2014-11-26 12:28 - 2014-11-24 23:39 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libegl.dll
2014-11-26 12:28 - 2014-11-24 23:39 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll
2014-11-26 12:28 - 2014-11-24 23:39 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll
2014-11-26 12:28 - 2014-11-24 23:39 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\StartupApproved\Run: => "Optimizer Pro"

========================= Accounts: ==========================

Administrator (S-1-5-21-3071963366-82540369-3713777275-500 - Administrator - Disabled)
Guest (S-1-5-21-3071963366-82540369-3713777275-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3071963366-82540369-3713777275-1005 - Limited - Enabled)
Lisa Rey (S-1-5-21-3071963366-82540369-3713777275-1001 - Administrator - Enabled) => C:\Users\Lisa Rey

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (12/27/2014 11:01:41 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (12/27/2014 11:01:11 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (12/27/2014 11:00:41 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (12/27/2014 11:00:11 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}

Error: (12/27/2014 10:52:08 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/27/2014 10:51:38 PM) (Source: DCOM) (EventID: 10010) (User: VIKI)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2014-12-20 12:44:09.430
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements.

Date: 2014-12-20 12:44:08.934
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements.

Date: 2014-12-20 12:17:32.690
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements.

Date: 2014-12-20 12:17:32.409
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements.

Date: 2014-12-12 17:30:57.279
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements.

Date: 2014-12-12 17:30:57.014
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Percentage of memory in use: 47%
Total physical RAM: 3977.27 MB
Available physical RAM: 2069.33 MB
Total Pagefile: 4745.27 MB
Available Pagefile: 2455.24 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:452.15 GB) (Free:411.92 GB) NTFS
Drive e: (ESP) (Fixed) (Total:0.48 GB) (Free:0.44 GB) FAT32
Drive x: () (Fixed) (Total:0.44 GB) (Free:0.14 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:12.04 GB) (Free:0.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 9808CB31)

Partition: GPT Partition Type.

==================== End Of Log ============================

Broni · Dec 28, 2014

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

LisaR · Dec 28, 2014

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-12-2014
Ran by Lisa Rey at 2014-12-28 18:53:37 Run:1
Running from C:\Users\Lisa Rey\Desktop
Loaded Profile: Lisa Rey (Available profiles: Lisa Rey)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3071963366-82540369-3713777275-1001\...\MountPoints2: {30863a26-825f-11e4-be8b-f82fa8cf797c} - "E:\TL-Bootstrap.exe"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:56332;https=127.0.0.1:56332
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3071963366-82540369-3713777275-1001 -> {A04D935A-1590-498E-BA3D-B79A7633A952} URL =
CHR HomePage: Default -> hxxp://Vosteran.com/?f=1&a=vst_cmi_14_50_ie&cd=2XzuyEtN2Y1L1Qzu0F0AtB0F0Azz0C0FyBzyyB0ByE0CyD0CtN0D0Tzu0StCtDyByCtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyDzzyBzyzztByB0EtG0D0ByEtCtGzyzz0CtCtGtDtCzyyDtGyEyDtC0B0FyEyD0Czy0C0EyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtA0Bzz0ByB0B0CtG0DtDtAtDtGyE0FzyyBtG0BzztBtCtGyBtB0E0DyC0AyB0C0D0A0Bzz2Q&cr=1939495008&ir=
CHR HKLM-x32\...\Chrome\Extension: [iomphmdalfmaifjccmagmllnicjoghhk] - No Path
(MicroTools) C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe
C:\Program Files (x86)\YouTube Downloader Services
R2 YouTubeDownload_P2; C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe [2967160 2014-11-01] (MicroTools)
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE.dat
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE1.dat
C:\Users\Lisa Rey\random.dat
C:\Users\Lisa Rey\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Lisa Rey\AppData\Local\Temp\Quarantine.exe

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKU\S-1-5-21-3071963366-82540369-3713777275-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{30863a26-825f-11e4-be8b-f82fa8cf797c}" => Key deleted successfully.
HKCR\CLSID\{30863a26-825f-11e4-be8b-f82fa8cf797c} => Key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-3071963366-82540369-3713777275-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A04D935A-1590-498E-BA3D-B79A7633A952}" => Key deleted successfully.
HKCR\CLSID\{A04D935A-1590-498E-BA3D-B79A7633A952} => Key not found.
Chrome HomePage deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iomphmdalfmaifjccmagmllnicjoghhk" => Key deleted successfully.
[2672] C:\Program Files (x86)\YouTube Downloader Services\P2\youtubeserv.exe => Process closed successfully.
C:\Program Files (x86)\YouTube Downloader Services => Moved successfully.
YouTubeDownload_P2 => Service stopped successfully.
YouTubeDownload_P2 => Service deleted successfully.
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE.dat => Moved successfully.
C:\Users\Lisa Rey\jagex_cl_runescape_LIVE1.dat => Moved successfully.
C:\Users\Lisa Rey\random.dat => Moved successfully.
C:\Users\Lisa Rey\AppData\Local\Temp\dllnt_dump.dll => Moved successfully.
C:\Users\Lisa Rey\AppData\Local\Temp\Quarantine.exe => Moved successfully.

The system needed a reboot.

==== End of Fixlog 18:53:38 ====

Broni · Dec 28, 2014

Last scans...

Download Security Check from here or here and save it to your Desktop.

Double-click SecurityCheck.exe
Follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.

Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
- Other Services
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

Download Sophos Free Virus Removal Tool and save it to your desktop.

Double click the icon and select Run
Click Next
Select I accept the terms in this license agreement, then click Next twice
Click Install
Click Finish to launch the program
Once the virus database has been updated click Start Scanning
If any threats are found click Details, then View log file... (bottom left hand corner)
Copy and paste the results in your reply
Close the Notepad document, close the Threat Details screen, then click Start cleanup
Click Exit to close the program

LisaR · Dec 28, 2014

Results of screen317's Security Check version 0.99.93
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Windows Defender
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 65
Java 8 Update 25
Java version 32-bit out of Date!
Google Chrome (39.0.2171.71)
Google Chrome (39.0.2171.95)
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbam.exe
Malwarebytes Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast ng vbox\AvastVBoxSVC.exe
AVAST Software Avast ng ngservice.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

LisaR · Dec 28, 2014

Farbar Service Scanner Version: 21-07-2014
Ran by Lisa Rey (administrator) on 28-12-2014 at 19:40:16
Running from "C:\Users\Lisa Rey\Desktop"
Microsoft Windows 8.1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is set to Demand. The default start type is Auto.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MsMpEng.exe => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed

**** End of log ****

LisaR · Dec 28, 2014

Sophos:
0 threats found.

Broni · Dec 29, 2014

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download

DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

Activate UAC (optional; some users prefer to keep it off)
Remove disinfection tools
Create registry backup
Purge System Restore
Reset system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly (you need to redownload these tools since they were removed by DelFix).

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

11. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

12. Please, let me know, how your computer is doing.

Broni · Jan 2, 2015

The issue seems to be resolved.

Solved Viruses overwhelming browser

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 56,041 +516

Posts: 16 +0

Posts: 16 +0

Posts: 56,041 +516

Posts: 16 +0

Posts: 56,041 +516

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 56,041 +516

Attachments

Posts: 16 +0

Posts: 56,041 +516

Posts: 16 +0

Posts: 16 +0

Posts: 16 +0

Posts: 56,041 +516

Posts: 56,041 +516

Similar threads