TechSpot

Virus removal needed on business computer

By dawnieando
Jan 7, 2015
  1. After moving to a new office with my security consultant he informed me to scan my computer. after using firefox once it open two new tabs at google and after discussing the incident with my consultant he informed me to scan with malwarebytes, which required me to run it in safe mode. since it got stuck on the preliminary scans for 4 hours.

    due to the number of entries he informed me to go to this website and begin the process of following the instuctions given for a through disinfection.

    he also stated he trusts this website and has been a member for years.

    --------------------------------------------------------------------------------------------------------------------------------------------------------------------

    the malwarebytes entrie is in the next post DDS entries are below.
     
  2. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Scan Date: 06/01/2015
    Scan Time: 08:49:12
    Logfile: Malwarebytes preliminary scan 20150601.txt
    Administrator: Yes

    Version: 2.00.2.1012
    Malware Database: v2015.01.05.04
    Rootkit Database: v2014.12.30.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Dawn Anderson

    Scan Type: Custom Scan
    Result: Completed
    Objects Scanned: 1005288
    Time Elapsed: 3 hr, 29 min, 16 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Enabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 2
    PUP.Optional.StartSavin.A, HKU\S-1-5-21-688939681-313738502-1202394865-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{26C894E6-DB3B-453A-8E4C-CCB69336561E}, , [11f0d69316663afc4c7d20bc30d2ef11],
    PUP.Optional.Softonic.A, HKU\S-1-5-21-688939681-313738502-1202394865-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, , [27da9bcec6b6c86e54f2a7c0ec178e72],

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 42
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults\preferences, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale\en-US, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\widgets, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\scripts, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.SmartBar.A, C:\Users\Dawn Anderson\AppData\LocalLow\Smartbar, , [9f625712bfbdc86ec216134991728b75],

    Files: 615
    PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml, , [ce33c3a636469b9b0b25277b768d0ff1],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome.manifest, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\install.rdf, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\background.html, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\baseObject.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\browser.xul, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\dialog.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\main.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.xul, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\search_dialog.xul, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\asyncDB.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\background.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\browserAction.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\contextMenu.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\dbManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\dom_bg.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\fileManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefox.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefoxNotifications.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefoxOmnibox.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\message.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\pageAction.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\request.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\tabs.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\webRequest.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\console.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\consts.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\delegate.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\extensionDataStore.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\folderIOWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\httpObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\IDBWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\installer.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\logFile.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\prefs.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\progressListenerObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\registry.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\reloadObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\reports.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\requestObject.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\searchSettings.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\uninstallObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\updateManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\utils.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\xhr.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults\preferences\prefs.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\manifest.xml, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins.json, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\1000014_GPL Plugin (Loader).js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\1000015_GPL Background (BG).js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\13_CrossriderAppUtils.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\14_CrossriderUtils.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\177_crossriderDashboard.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\17_jQuery.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\182_openUrl.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\183_tabsWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\207_dbWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\47_resources_background.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\64_appApiMessage.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\72_appApiValidation.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\78_CrossriderInfo.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\98_omniCommands.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode\background.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode\extension.js, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale\en-US\translations.dtd, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button1.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button2.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button3.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button4.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button5.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\crossrider_statusbar.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon128.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon16.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon24.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon48.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\panelarrow-up.png, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\popup.html, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\skin.css, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\update.css, , [68991f4a0c70af87f80def5a41c2ea16],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome.manifest, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\install.rdf, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\manifest.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\bandoocode.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\neterror.xhtml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\partner.coupons.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\preferences.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\radiobeta.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\template.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\toolbar.htm, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\toolbar.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\vmncode.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\vmnrsswin.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search\engines.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search\search.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\about.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\bandoocode.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpanel.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpaneltransparent.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpanelwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxprefwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxtransparentwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\emailnotifierproviders.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\external.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\neterror.xhtml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\vmncode.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\wmpstreamer.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules\datastore.jsm, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules\nsDragAndDrop.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\babylon_logo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bandoo.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bluelite.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bluesky.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-search-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-settings-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-widgets-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ca.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\dictionary.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\downloadcom.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\dtxlogo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ebay.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\email.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\email_on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\facebook.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\games.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred0.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred1.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred1_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred2.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred2_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred3.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred3_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred4.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred4_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphredna.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\grey.gif, , [6a97fb6e87f586b012a74e0a19eac937],
     
  3. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ico-shield.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_amazon.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_games.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_radio_png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_seperator_png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_twitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_youtube.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\images.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\imesh.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lichen.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-separator.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\mail.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\maps.bmp, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\menuseparatorback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modify-save.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modify.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modifyhot.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\music.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\news.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\orange.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\protect-id.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-buffering.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-connecting.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-playing.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-stopped.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta.ico, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\relatedlinks.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-collapse.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-delete.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn_settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred0_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-about.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\pixsy.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rsstopback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-lichen.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-expand.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-feed.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder-remove.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder-rename.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-found.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-reload.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-subscribe.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rssback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search_button_over_png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search_button_png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\shopping.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\siteinfo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-bluelite.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-bluesky.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-yellow.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\technorati.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\toolbarsplitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\translate.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\video.bmp, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\vmn.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\vmn.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\web.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\widgets-square-16px.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\wikipedia.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\yahoosearch.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\yellow.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\youtube.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\zoom.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\add.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\aol.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-dn.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-right-disabled.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-right.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-up.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-end.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-mdl_ff.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-start.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-end.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-mdl_ff.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\blank.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn-widgets-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnback-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnback-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnleft-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnleft-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnright-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnright-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn_slider.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\button-splitter-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\button-splitter-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\checkmark.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\chevron.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\collapse.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\comcast.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\dtx.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\edit-back-hot.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\edit-back.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\expand.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\found.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\gmail.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_cyan.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_lime.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_yellow.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\hotmail.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\ico-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\imap.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\lastsearch-thumb-back.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\loadingMid.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\lock.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\logo-separator.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\mailcom.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitem-splitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemback-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemback-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemleft-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemleft-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemright-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemright-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_bg-basic.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_separator_bar.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-start.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_magenta.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_separator_white.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\modify.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\move.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\movetarget.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\pop.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-buffering.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-connecting.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-playing.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-stopped.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta.ico, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\reload.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\remove.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rename.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\resize-box.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rss.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rsschannelback.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\RSSLogo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rsstabdivider.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\scroll-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\scroll-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\search-go.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\search.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\text-ellipsis.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\toolbarsplitter.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\transparent_1px.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\yahoo.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\footer.htm, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gamecategory.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gameData.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gameList.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\games.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gametype.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\initHTML.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupGames.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupHTML.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupRSS.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupWidgets.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\scroll.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\panels.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupAbout.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupGames.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupRSS.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupWidgets.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\main.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\css\dialog.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\bg.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-wide-close-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
     
  4. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-wide-close.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\default.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-off-l.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-off-r.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-on-l.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-on-r.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\transparent.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-right-resize.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\scripts\defscript.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-dn.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-sml-drop.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-sml.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-up.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrowr-bluew5.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-aboutbox.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-btnover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-pnl520x390.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-back.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-drag.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-mdl-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-moredetails.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-next-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-next.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-play-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-previous-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-previous.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-right-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-try-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-try-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bullet-orange.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\gamethumb-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\gamethumb2-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-calendar.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-dollar.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-download.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-joystick24.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-news24.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-Add.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-download.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-Info.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-shop.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\menul-bgon.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\menul-bgover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\panel-botm-noscroll.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-bg-206.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-bg.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-topwin.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-disable.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-disable.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-play-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-tags.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\star_x_grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\star_x_orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\TRUSTe_about.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-detailed-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-detailed-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-thumb-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-thumb-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets-square-16px.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets-square-24px.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\managerpanel.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\volumeslider.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css\manager.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css\slider.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-busy.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\bg-pnl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\collapsed_button.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\expanded_button.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-radio.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\music-note.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-pause-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-pause.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-play-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-bg.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-buffer.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-on.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-warning.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-design-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-design.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-0.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-1.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-2.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-3.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-mute.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\scrollbar-handle.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\scrollbar-track.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\slider.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\slideron.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\track.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_07.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_02.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_03.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_04.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_06.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_08.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_09.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_10.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_11.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_12.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_13.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_14.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_15.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_16.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_18.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_19.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_20.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_21.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\close-hot.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\close-normal.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\loadingMid.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\proxy.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\template.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\template.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\templateFF.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\cond999.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\icons.xml, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na-s.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na-t.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\popupWeather.css, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\popupWeather.html, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\add.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png, , [6a97fb6e87f586b012a74e0a19eac937],
     
  5. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\box-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-main.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-weather.gif, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-middle.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency.dll, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency3.5.dll, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency3.6.dll, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency3.5.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency3.6.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\windowmediator.js, , [6a97fb6e87f586b012a74e0a19eac937],
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "148bceed0ddacaa12aab4fb904f48b84");), ,[a65bd09989f39e98d651a121d233b54b]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1411919041);), ,[c839baafee8e082e6cbc348ed72e3ec2]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.active", true);), ,[48b9adbcf5878bab190fab1724e1fb05]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.addressbar", "NA");), ,[26dbdb8e3745cc6abc6cc4fe43c28878]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", "");), ,[857cdc8d423af93d47e118aa6d9857a9]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet", true);), ,[a958bdacc1bbce682cfc2d953fc69967]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet_FF25_FIX", true);), ,[a45d6bfe9ede67cfa781457d33d2c43c]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet", true);), ,[58a92346dca0e2549e8a744e19ec32ce]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet_FF25_FIX", true);), ,[c43d6405bac2e74f62c6437f976efe02]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.backgroundver", 52);), ,[1de4baafa8d43501c563635f0df8867a]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "");), ,[c53c73f68defba7c71b7ad152adb9070]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.changeprevious", false);), ,[7f82f8712755f14565c31ba7fa0b6e92]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[8d74fe6b205c48eeb276853dcf36d52b]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1411919041");), ,[d9287aefa8d439fd2dfb49797293d62a]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[818039304438092dab7d7151d82d14ec]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1411919041");), ,[fb0624450a7255e145e3d8eac83dff01]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.expiration", "Mon Jan 05 2015 10:44:22 GMT+0000 (GMT Standard Time)");), ,[649dc4a581fb5fd733f50db5b64ff808]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.value", "%22/**/%22");), ,[867b99d01f5dbc7a1a0ef3cf61a42cd4]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Mon Jan 05 2015 10:44:22 GMT+0000 (GMT Standard Time)");), ,[1de4c5a4e9939f9728003c86d33212ee]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22facebook.com,[19e85514f18b979f7aae5c66de278d73]Cnonexistantdomain.com%22");), %5
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Mon Jan 12 2015 09:44:17 GMT+0000 (GMT Standard Time)");), ,[f30eb6b3700c0a2c40e80cb6b74e59a7]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22GB%22");), ,[db2689e0067650e6b375279b45c018e8]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[a35e4b1ec2baa88ee048efd391748878]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1420451053");), ,[45bcec7d63191224ce5abb0746bf30d0]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[3fc25e0b077535019791239f9a6b0cf4]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221415662837%22");), ,[f0112b3eb2ca2e08d058e1e1a3620af6]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[25dcd792bfbd43f32206d0f21bea03fd]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22");), ,[e51cc2a793e90e286bbdccf6bd48926e]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[09f80f5a7dff8ea8fa2e9a286d9839c7]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22,[748db3b6c7b5b18571b7a81a7491bf41]C%22sub_id%22%3A%220%22,[748db3b6c7b5b18571b7a81a7491bf41]C%22uzid%22%3A%220%22%7D");), %5
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[4cb57beeff7dc47236f2754d53b2f10f]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.value", "%221411655994%22");), ,[758c03663448a096a088d6ec5aab15eb]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[7d84df8abebed06683a5774bcd3819e7]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2214019%22");), ,[d62b690084f8fa3cdb4d348e22e3738d]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[43be7aefb7c541f5b276853dda2bd32d]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1411919221966");), ,[1de444258fedb87e131506bc8382f808]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[14ed8ddcc3b99a9c32f601c18e778080]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%2221%22");), ,[cf3297d2a7d5162073b55a6871948977]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[f40d5b0eb9c3c175101831917f86cc34]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%221164097%22");), ,[41c080e9e79540f61c0c665c19ec4db3]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)");), ,[78892e3be696ef47a286b909d332ee12]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1411919058946");), ,[27daf97017652313ad7b972bce370000]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.description", "I Want This!");), ,[976a86e3542878becb5df4ce23e230d0]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.domain", "");), ,[22df7fea80fc85b128003e8457ae7888]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.enablesearch", false);), ,[6899d4951c60072f47e1c00259ac0bf5]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.homepage", "");), ,[4eb3175266169a9c40e81aa8d13433cd]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.iframe", false);), ,[07fa4c1d8fedee48d652e0e2df26e917]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[61a00f5af78537ff1414f7cbc243b54b]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22,[9c65d099f58777bf25037d452fd601ff]C%22sub_id%22%3A%220%22,[9c65d099f58777bf25037d452fd601ff]C%22uzid%22%3A%220%22%7D");), %5
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[a85974f558241620eb3db012e0259070]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "149");), ,[c0416207fc80ea4c220669590302659b]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[7889ed7c5527c4724edaa919ea1b649c]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0");), ,[c53cf5746814c86e76b207bb877edd23]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[867b3a2f25570036e1471fa3778ea25e]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D");), ,[fa0709603745a98d13151aa81fe643bd]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Mon Jan 05 2015 15:44:17 GMT+0000 (GMT Standard Time)");), ,[02ffef7afd7f1323e7415969da2bee12]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true");), ,[936ec4a5116b67cf52d6b111cd384cb4]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");), ,[c53c4e1b700c033387a1992909fc17e9]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D");), ,[6a97ee7bc6b664d273b5c5fd040121df]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.lastDailyReport", "1420472659298");), ,[639e551492ea9f97a97fa51dae5718e8]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.lastUpdate", "1420472659121");), ,[d1303633b9c3053158d031918f76de22]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.manifesturl", "");), ,[35cce584ec906ec8bf698d3556af2bd5]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.name", "I Want This");), ,[9a675b0e7b012e080b1d942e62a31be5]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.newtab", "");), ,[45bc80e994e895a1230581418e77da26]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.opensearch", "");), ,[e41db7b2fd7f52e480a8cbf773923fc1]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/2258/plugins/093/ff/plugins.json");), ,[7c8581e8f28a7eb8e345744e47be8e72]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.pluginsversion", 74);), ,[09f842273646c86eae7a92300afb7d83]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.publisher", "Innovative Apps");), ,[9d642247334925116abea2200ef7837d]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.searchstatus", 0);), ,[7b86ea7f6e0ec86e0127e3df44c1d62a]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.setnewtab", false);), ,[b64b2a3f3f3df046e345dae85ea7a957]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.thankyou", "http://iw.antthis.com/thankyou.html");), ,[758c7bee611b072f54d411b131d4847c]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.updateinterval", 360);), ,[23dea7c2403c7bbb1f09c8fafc0919e7]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.ver", 149);), ,[0001da8f2e4e47efff290db54bba916f]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.apps", "2258");), ,[35cc6900b1cb5dd96cbc1aa8ac59d12f]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.bic", "148bceed0ddacaa12aab4fb904f48b84");), ,[4bb64e1b91ebac8ab6726d557293bb45]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.cid", 2258);), ,[a55c63067a0261d559cf3a88e025d828]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.firstrun", false);), ,[f50c59103c405cdaf632be04ea1b7888]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.hadappinstalled", true);), ,[35cc87e24933979fcf59dde5c63f04fc]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.installationdate", 1411919041);), ,[679aa0c9b5c79f972107fec465a0d22e]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.modetype", "production");), ,[ce332346c1bb5adc9395c101b74edf21]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.reportInstall", true);), ,[19e8f772c1bb9e98b96f645ee61fea16]
    PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.statsDailyCounter", 3);), ,[57aa87e23943cd69f63213afe421e818]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  6. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: 11.0.9600.17496 BrowserJavaVersion: 1.6.0_37
    Run by Dawn Anderson at 9:14:56 on 2015-01-07
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4095.897 [GMT 0:00]
    .
    AV: ZoneAlarm Extreme Security Antivirus *Enabled/Updated* {23B6D20A-C2DE-B3F5-C67D-07ECD854E6A9}
    SP: ZoneAlarm Extreme Security Anti-Spyware *Enabled/Updated* {98D733EE-E4E4-BC7B-FCCD-3C9EA3D3AC14}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    FW: ZoneAlarm Extreme Security Firewall *Enabled* {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
    C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    C:\Windows\system32\svchost.exe -k apphost
    C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe
    C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
    C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
    C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
    C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
    c:\xampp\mysql\bin\mysqld.exe
    C:\Program Files (x86)\wrapper_inst\file_to_run.exe
    C:\Program Files\Splunk\bin\splunkd.exe
    C:\Program Files\Splunk\bin\splunkweb.exe
    C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
    C:\Windows\system32\svchost.exe -k iissvcs
    C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe
    C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
    C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe
    C:\ZoneAlarmBackup\ZABackup Service.exe
    C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\vssvc.exe
    C:\Windows\System32\svchost.exe -k swprv
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    C:\Windows\SysWOW64\rundll32.exe
    C:\Program Files (x86)\Skype\Phone\Skype.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
    C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
    C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
    C:\Program Files (x86)\AVG Secure Search\vprot.exe
    C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
    C:\Program Files (x86)\TechSmith\Snagit 11\TSCHelp.exe
    C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
    C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
    C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
    C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
    C:\Program Files (x86)\CheckPoint\ZoneAlarm\ThreatEmulation.exe
    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
    C:\Program Files (x86)\TechSmith\Snagit 11\SnagPriv.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Program Files (x86)\TechSmith\Snagit 11\snagiteditor.exe
    C:\PROGRA~2\CHECKP~1\ZONEAL~1\MAILFR~1\mantispm.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\splwow64.exe
    C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
    C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
    C:\Program Files (x86)\Zoom Downloader\DownloadManager.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.com
    uSearch Bar = about:blank
    uSearch Page = about:blank
    uSearchAssistant = about:blank
    mWinlogon: Userinit = userinit.exe,
    BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
    BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
    BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
    BHO: ZoneAlarm Do Not Track: {6E45F3E8-2683-4824-A6BE-08108022FB36} - C:\Program Files (x86)\DoNotTrackPlus\IE\DNTPAddon.dll
    BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -
    BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll
    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    BHO: Zoom Downloader: {E5C66DD8-308B-4a4f-AF0A-3D04F25B5343} -
    TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
    TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
    TB: &RoboForm Toolbar: {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll
    TB: ZoneAlarm Security Toolbar: {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} -
    TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
    TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
    EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
    uRun: [IBP] <no file>
    uRunOnce: [Application Restart #4] C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session http://feed.snap.do/?publisher=Snap...cef-760c-4f60-af2f-4d70a5e67ee8&searchtype=sc
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe
    mRun: [Live Update 5] C:\Program Files (x86)\MSI\ControlCenter\LU5.exe /reminder
    mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
    mRun: [QuickArticleSubmitter] C:\PROGRA~2\QUICKA~3\AutoSubmission.exe
    mRun: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    mRun: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
    mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
    mRun: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
    mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
    StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
    StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
    StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ZONEAL~1.LNK - C:\ZoneAlarmBackup\ZABackupReg2ini.exe
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SNAGIT~1.LNK - C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
    uPolicies-Explorer: HideSCAHealth = dword:1
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-Explorer: HideSCAHealth = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
    mPolicies-System: ConsentPromptBehaviorUser = dword:0
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
    IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    .
    INFO: HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    TCP: NameServer = 77.75.184.4 77.75.184.5
    TCP: Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} : DHCPNameServer = 77.75.184.4 77.75.184.5
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
    AppInit_DLLs= C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll
    SSODL: WebCheck - <orphaned>
    x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
    x64-BHO: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -
    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
    x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll
    x64-TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
    x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
    x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
    x64-Run: [CmPCIaudio] C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
    x64-Run: [pcreg] C:\Program Files\wrapper_inst\service.exe
    x64-Run: [ISW] "C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe" /icon="hidden"
    x64-IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
    x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
    .
    INFO: x64-HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
    x64-DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
    x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>
    x64-SSODL: WebCheck - <orphaned>
    Hosts: 127.0.0.1 www.spywareinfo.com
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\
    FF - prefs.js: browser.search.selectedEngine - Search By ZoneAlarm
    FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
    FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll
    FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll
    FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
    FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
    FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
    FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
    FF - plugin: C:\Users\Dawn Anderson\AppData\Local\Citrix\Plugins\104\npappdetector.dll
    FF - plugin: C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll
    FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npatgpc.dll
    FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npo1d.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll
    FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: extensions.funmoods_i.hmpg - true
    FF - user.js: extensions.funmoods_i.hmpgUrl - hxxp://start.funmoods.com/?f=1&a=adknlg
    FF - user.js: extensions.funmoods_i.dfltSrch - true
    FF - user.js: extensions.funmoods_i.srchPrvdr - Search
    FF - user.js: extensions.funmoods_i.dnsErr - true
    FF - user.js: extensions.funmoods_i.newTab - true
    FF - user.js: extensions.funmoods_i.newTabUrl - hxxp://start.funmoods.com/?f=2&a=adknlg
    FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=
    FF - user.js: extensions.funmoods_i.id - d62ddd4e0000000000008c89a59ccf32
    FF - user.js: extensions.funmoods_i.instlDay - 15410
    FF - user.js: extensions.funmoods_i.vrsn - 1.5.11.16
    FF - user.js: extensions.funmoods_i.vrsni - 1.5.11.16
    FF - user.js: extensions.funmoods_i.vrsnTs - 1.5.11.1619:57:39
    FF - user.js: extensions.funmoods_i.prtnrId - funmoods
    FF - user.js: extensions.funmoods_i.prdct - funmoods
    FF - user.js: extensions.funmoods_i.aflt - adknlg
    FF - user.js: extensions.funmoods_i.smplGrp - none
    FF - user.js: extensions.funmoods_i.tlbrId - base
    FF - user.js: extensions.funmoods_i.instlRef -
    FF - user.js: extensions.funmoods_i.dfltLng -
    FF - user.js: extensions.funmoods_i.excTlbr - false
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    .
    FF - user.js: extensions.autoDisableScopes - 14
    FF - user.js: extensions.zonealarm_i.hmpg - true
    FF - user.js: extensions.zonealarm.hmpgUrl - hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32
    FF - user.js: extensions.zonealarm.newTabUrl - hxxp://search.zonealarm.com/?Source=Newtab&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32
    FF - user.js: extentions.y2layers.installId - 16568d50-48fc-48e1-b5ce-ab11381c2a70
    FF - user.js: extentions.y2layers.defaultEnableAppsList - ezLooker,pagerage,buzzdock,toprelatedtopics,twittube
    .
    FF - user.js: extensions.zonealarm.autoRvrt - false
    FF - user.js: extensions.zonealarm.dfltSrch - true
    FF - user.js: extensions.zonealarm.srchPrvdr - Search By ZoneAlarm
    FF - user.js: extensions.zonealarm.keyWordUrl - hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&q={searchTerms}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&
    FF - user.js: extensions.zonealarm_i.dnsErr - true
    FF - user.js: extensions.zonealarm_i.newTab - false
    FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&&q=
    FF - user.js: extensions.zonealarm.id - d62ddd4e0000000000008c89a59ccf32
    FF - user.js: extensions.zonealarm.appId - {C56C48A0-DA4E-46F6-9859-1553DC865F84}
    FF - user.js: extensions.zonealarm.instlDay - 15731
    FF - user.js: extensions.zonealarm.vrsn - 1.8.3.16
    FF - user.js: extensions.zonealarm.vrsni - 1.8.3.16
    FF - user.js: extensions.zonealarm_i.vrsnTs - 1.8.3.1621:08:28
    FF - user.js: extensions.zonealarm.prtnrId - checkpoint
    FF - user.js: extensions.zonealarm.prdct - zonealarm
    FF - user.js: extensions.zonealarm.aflt - 1042
    FF - user.js: extensions.zonealarm_i.smplGrp - none
    FF - user.js: extensions.zonealarm.tlbrId - base2013
    FF - user.js: extensions.zonealarm.instlRef - ZLN26224174455790-1001
    FF - user.js: extensions.zonealarm.dfltLng - en
    FF - user.js: extensions.zonealarm.excTlbr - false
    FF - user.js: extensions.zonealarm.admin - false
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-7-23 50976]
    R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\System32\drivers\klim6.sys [2014-9-11 29792]
    R1 kltdi;kltdi;C:\Windows\System32\drivers\kltdi.sys [2014-9-11 54104]
    R1 kneps;kneps;C:\Windows\System32\drivers\kneps.sys [2014-9-11 177760]
    R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-7-28 361984]
    R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-6-24 55424]
    R2 AWRScheduler;Advanced Web Ranking Scheduler;C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe [2013-7-15 134248]
    R2 ISWKL;ZoneAlarm AntiKeylogger ISWKL;C:\Program Files (x86)\CheckPoint\AKL\ISWKL.sys [2014-7-17 54144]
    R2 RtNdPt60;Realtek NDIS Protocol Driver;C:\Windows\System32\drivers\RtNdPt60.sys [2012-3-11 27136]
    R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-3-11 46136]
    R3 icsak;icsak;C:\Program Files (x86)\CheckPoint\AKL\AK\icsak.sys [2014-7-17 48512]
    R3 NTIOLib_1_0_4;NTIOLib_1_0_4;C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys [2012-3-11 14136]
    R3 pppop;PPPoP WAN Adapter;C:\Windows\System32\drivers\pppop64.sys [2009-7-21 42528]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-3-11 539240]
    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-3-11 44672]
    S2 Apache2.2;Apache2.2;C:\xampp\apache\bin\httpd.exe [2011-9-10 18432]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
    S3 c2wts;Claims to Windows Token Service;C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2014-3-31 15768]
    S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2);C:\Windows\System32\drivers\RtTeam60.sys [2012-3-11 50720]
    S3 splknetdrv;splknetdrv;C:\Windows\System32\drivers\splknetdrv-vista.sys [2014-4-7 34816]
    S3 splunkdrv-win6;Splunk Trace Kernel Mode Driver;C:\Windows\System32\drivers\splunkdrv-win6.sys [2014-4-7 44544]
    S3 SplunkMonitorNoHandle;SplunkMonitorNoHandle;C:\Windows\System32\drivers\SplunkMonitorNoHandleDrv-vista.sys [2014-4-7 19968]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]
    S4 RsFx0150;RsFx0150 Driver;C:\Windows\System32\drivers\RsFx0150.sys [2010-4-3 313696]
    .
    =============== Created Last 30 ================
    .
    2015-01-07 08:38:18 11870360 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B10413B-9CF3-43C4-AB15-BA5BEA71BF80}\mpengine.dll
    2015-01-05 09:55:39 800368 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuuc52.dll
    2015-01-05 09:55:39 220784 ----a-w- C:\Program Files (x86)\Mozilla Firefox\sandboxbroker.dll
    2015-01-05 09:55:39 10397296 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icudt52.dll
    2015-01-05 09:55:39 1023600 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuin52.dll
    2015-01-05 09:55:38 3231832 ----a-w- C:\Program Files (x86)\Mozilla Firefox\d3dcompiler_46.dll
    2014-12-19 09:03:34 144384 ----a-w- C:\Windows\System32\ieUnatt.exe
    2014-12-19 09:03:34 115712 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
    2014-12-16 14:20:14 11870360 ------w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\mpengine.dll
    2014-12-15 11:26:00 -------- d-----w- C:\ProgramData\Visan
    2014-12-15 11:26:00 -------- d-----w- C:\ProgramData\HP Photo Creations
    2014-12-15 11:26:00 -------- d-----w- C:\Program Files (x86)\HP Photo Creations
    2014-12-15 11:23:13 -------- d-----w- C:\Users\Dawn Anderson\AppData\Roaming\HpUpdate
    2014-12-15 11:19:36 -------- d-----w- C:\Program Files (x86)\HP
    2014-12-15 11:19:24 -------- d-----w- C:\Program Files\HP
    2014-12-15 11:12:52 -------- d-----w- C:\Users\Dawn Anderson\AppData\Local\HP
    2014-12-15 10:52:47 -------- d-----w- C:\Windows\System32\appraiser
    2014-12-12 15:54:08 55808 ----a-w- C:\Windows\System32\rrinstaller.exe
    2014-12-12 15:54:08 50176 ----a-w- C:\Windows\SysWow64\rrinstaller.exe
    2014-12-12 15:54:08 3209728 ----a-w- C:\Windows\SysWow64\mf.dll
    2014-12-12 15:54:08 24576 ----a-w- C:\Windows\System32\mfpmp.exe
    2014-12-12 15:54:08 23040 ----a-w- C:\Windows\SysWow64\mfpmp.exe
    2014-12-12 15:54:08 206848 ----a-w- C:\Windows\System32\mfps.dll
    2014-12-12 15:54:08 2048 ----a-w- C:\Windows\SysWow64\mferror.dll
    2014-12-12 15:54:08 2048 ----a-w- C:\Windows\System32\mferror.dll
    2014-12-12 15:54:08 103424 ----a-w- C:\Windows\SysWow64\mfps.dll
    2014-12-12 15:54:07 4121600 ----a-w- C:\Windows\System32\mf.dll
    2014-12-12 11:14:38 830976 ----a-w- C:\Windows\System32\appraiser.dll
    2014-12-12 11:14:38 192000 ----a-w- C:\Windows\System32\aepic.dll
    2014-12-12 11:14:38 1232040 ----a-w- C:\Windows\System32\aitstatic.exe
    2014-12-12 11:14:38 1083392 ----a-w- C:\Windows\System32\aeinv.dll
    2014-12-12 11:14:35 741376 ----a-w- C:\Windows\System32\invagent.dll
    2014-12-12 11:14:34 413184 ----a-w- C:\Windows\System32\generaltel.dll
    2014-12-12 11:14:34 396800 ----a-w- C:\Windows\System32\devinv.dll
    2014-12-12 11:14:33 227328 ----a-w- C:\Windows\System32\aepdu.dll
    2014-12-12 11:14:03 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
    2014-12-12 11:14:03 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
    2014-12-12 11:13:54 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys
    2014-12-12 11:08:45 165888 ----a-w- C:\Windows\System32\charmap.exe
    2014-12-12 11:08:45 155136 ----a-w- C:\Windows\SysWow64\charmap.exe
    2014-12-12 11:05:16 346624 ----a-w- C:\Windows\System32\WSManMigrationPlugin.dll
    2014-12-12 11:05:16 310272 ----a-w- C:\Windows\System32\WsmWmiPl.dll
    2014-12-12 11:05:16 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe
    2014-12-12 11:05:16 248832 ----a-w- C:\Windows\SysWow64\WSManMigrationPlugin.dll
    2014-12-12 11:05:16 214016 ----a-w- C:\Windows\SysWow64\WsmWmiPl.dll
    2014-12-12 11:05:16 2020352 ----a-w- C:\Windows\System32\WsmSvc.dll
    2014-12-12 11:05:16 198656 ----a-w- C:\Windows\SysWow64\WSManHTTPConfig.exe
    2014-12-12 11:05:16 181248 ----a-w- C:\Windows\System32\WsmAuto.dll
    2014-12-12 11:05:16 145920 ----a-w- C:\Windows\SysWow64\WsmAuto.dll
    2014-12-12 11:05:16 1177088 ----a-w- C:\Windows\SysWow64\WsmSvc.dll
    2014-12-12 11:04:02 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
    2014-12-12 11:04:02 2048 ----a-w- C:\Windows\System32\tzres.dll
    2014-12-12 10:35:12 3981488 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
    2014-12-08 12:32:07 -------- d-sh--w- C:\Users\Dawn Anderson\AppData\Local\EmieBrowserModeList
    .
    ==================== Find3M ====================
    .
    2015-01-06 08:49:13 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    2014-12-12 11:35:32 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-12-12 11:35:32 701104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2014-11-24 14:04:56 275080 ------w- C:\Windows\System32\MpSigStub.exe
    2014-11-22 03:06:23 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
    2014-11-22 03:06:11 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
    2014-11-22 02:50:39 66560 ----a-w- C:\Windows\System32\iesetup.dll
    2014-11-22 02:50:10 580096 ----a-w- C:\Windows\System32\vbscript.dll
    2014-11-22 02:49:54 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
    2014-11-22 02:48:20 88064 ----a-w- C:\Windows\System32\MshtmlDac.dll
    2014-11-22 02:35:29 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe
    2014-11-22 02:34:51 814080 ----a-w- C:\Windows\System32\jscript9diag.dll
    2014-11-22 02:34:07 6039552 ----a-w- C:\Windows\System32\jscript9.dll
    2014-11-22 02:26:31 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
    2014-11-22 02:20:44 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2014-11-22 02:14:16 77824 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
    2014-11-22 02:07:43 501248 ----a-w- C:\Windows\SysWow64\vbscript.dll
    2014-11-22 02:07:17 62464 ----a-w- C:\Windows\SysWow64\iesetup.dll
    2014-11-22 02:06:32 47616 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
    2014-11-22 02:05:02 64000 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
    2014-11-22 01:54:30 620032 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
    2014-11-22 01:47:10 1359360 ----a-w- C:\Windows\System32\mshtmlmedia.dll
    2014-11-22 01:46:58 2125312 ----a-w- C:\Windows\System32\inetcpl.cpl
    2014-11-22 01:40:04 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
    2014-11-22 01:29:26 4299264 ----a-w- C:\Windows\SysWow64\jscript9.dll
    2014-11-22 01:28:21 2358272 ----a-w- C:\Windows\System32\wininet.dll
    2014-11-22 01:22:49 2052096 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
    2014-11-22 01:21:57 1155072 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
    2014-11-22 01:00:20 1888256 ----a-w- C:\Windows\SysWow64\wininet.dll
    2014-11-19 04:31:16 1217192 ----a-w- C:\Windows\SysWow64\FM20.DLL
    2014-11-11 03:08:52 241152 ----a-w- C:\Windows\System32\pku2u.dll
    2014-11-11 03:08:48 728064 ----a-w- C:\Windows\System32\kerberos.dll
    2014-11-11 02:44:32 186880 ----a-w- C:\Windows\SysWow64\pku2u.dll
    2014-11-11 02:44:25 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
    2014-10-25 01:57:59 77824 ----a-w- C:\Windows\System32\packager.dll
    2014-10-25 01:32:37 67584 ----a-w- C:\Windows\SysWow64\packager.dll
    2014-10-18 02:05:23 861696 ----a-w- C:\Windows\System32\oleaut32.dll
    2014-10-18 01:33:18 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
    2014-10-14 02:16:37 155064 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
    2014-10-14 02:13:06 683520 ----a-w- C:\Windows\System32\termsrv.dll
    2014-10-14 02:13:00 3241984 ----a-w- C:\Windows\System32\msi.dll
    2014-10-14 02:12:57 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
    2014-10-14 02:09:31 146432 ----a-w- C:\Windows\System32\msaudite.dll
    2014-10-14 02:07:31 681984 ----a-w- C:\Windows\System32\adtschema.dll
    2014-10-14 01:50:47 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
    2014-10-14 01:50:41 2363904 ----a-w- C:\Windows\SysWow64\msi.dll
    2014-10-14 01:49:38 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
    2014-10-14 01:47:30 146432 ----a-w- C:\Windows\SysWow64\msaudite.dll
    2014-10-14 01:46:02 681984 ----a-w- C:\Windows\SysWow64\adtschema.dll
    2014-10-10 00:57:42 3198976 ----a-w- C:\Windows\System32\win32k.sys
    .
    ============= FINISH: 9:17:22.49 ===============
     
  7. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 11/03/2012 17:44:27
    System Uptime: 07/01/2015 08:30:19 (1 hours ago)
    .
    Motherboard: MSI | | 870S-C45(FX) (MS-7715)
    Processor: AMD Athlon(tm) II X2 265 Processor | CPU1 | 3300/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 298 GiB total, 196.763 GiB free.
    D: is CDROM ()
    E: is FIXED (NTFS) - 1863 GiB total, 1858.468 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    No restore point in system.
    .
    ==== Installed Programs ======================
    .
    7-Zip 9.22beta
    Acrobat.com
    Adobe AIR
    Adobe Flash Player 15 ActiveX
    Adobe Flash Player 15 Plugin
    Adobe Reader XI (11.0.06)
    Advanced Web Ranking
    AMD APP SDK Runtime
    AMD Catalyst Install Manager
    AMD Fuel
    Artisteer 3
    AVG Security Toolbar
    BIOS Code Unlocked Technology
    Brother MFL-Pro Suite MFC-440CN
    C-Media PCI Audio Device
    Canon Easy-WebPrint EX
    Canon IJ Network Scanner Selector EX
    Canon IJ Network Tool
    Canon IJ Scan Utility
    Canon Inkjet Printer/Scanner/Fax Extended Survey Program
    Canon MX520 series MP Drivers
    Canon MX520 series On-screen Manual
    Canon MX520 series User Registration
    Canon My Image Garden
    Canon My Image Garden Design Files
    Canon My Printer
    Canon Quick Menu
    Canon Speed Dial Utility
    Catalyst Control Center
    Catalyst Control Center InstallProxy
    Catalyst Control Center Localization All
    Catalyst Control Center Profiles Mobile
    ccc-utility64
    CCC Help Chinese Standard
    CCC Help Chinese Traditional
    CCC Help Czech
    CCC Help Danish
    CCC Help Dutch
    CCC Help English
    CCC Help Finnish
    CCC Help French
    CCC Help German
    CCC Help Greek
    CCC Help Hungarian
    CCC Help Italian
    CCC Help Japanese
    CCC Help Korean
    CCC Help Norwegian
    CCC Help Polish
    CCC Help Portuguese
    CCC Help Russian
    CCC Help Spanish
    CCC Help Swedish
    CCC Help Thai
    CCC Help Turkish
    Cisco WebEx Meetings
    Citrix Online Launcher
    Definition Update for Microsoft Office 2010 (KB2910899) 32-Bit Edition
    Desktop SMS
    Dropbox
    EasyViewer
    Entity Framework Tools for Visual Studio 2013
    FastStone Capture 7.3
    FileZilla Client 3.6.0.1
    FortiClient SSLVPN v4.0.2300
    GIMP 2.6.11
    GlassFish Server Open Source Edition 3.1.2
    Google AdWords Editor
    Google Apps Migration For Microsoft Outlook® 3.0.19.44
    Google Apps Sync™ for Microsoft Outlook® 3.5.385.1020
    Google Chrome
    Google Talk Plugin
    Google Update Helper
    GoToMeeting 5.7.0.1172
    HP Officejet 2620 series Basic Device Software
    HP Officejet 2620 series Help
    HP Photo Creations
    HP Update
    IBP 12.0.3
    IIS 8.0 Express
    IIS Express Application Compatibility Database for x64
    IIS Express Application Compatibility Database for x86
    IIS URL Rewrite Module 2
    iisnode for iis 7.x (x64) core
    iisnode for iis 7.x dev package
    import.io
    Java Auto Updater
    Java(TM) 6 Update 37
    Java(TM) 7 Update 3 (64-bit)
    Java(TM) SE Development Kit 7 Update 3 (64-bit)
    JavaFX 2.0.3 (64-bit)
    JavaFX 2.0.3 SDK (64-bit)
    join.me
    Live Update 5
    Malwarebytes Anti-Malware version 2.0.2.1012
    McAfee Security Scan Plus
    Mendeley Desktop 1.12.2
    Microsoft .NET Framework 4 Multi-Targeting Pack
    Microsoft .NET Framework 4.5 Multi-Targeting Pack
    Microsoft .NET Framework 4.5 SDK
    Microsoft .NET Framework 4.5.1
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)
    Microsoft .NET Framework 4.5.1 SDK
    Microsoft Application Error Reporting
    Microsoft ASP.NET MVC 3
    Microsoft ASP.NET MVC 4 Runtime
    Microsoft ASP.NET Web Pages
    Microsoft ASP.NET Web Pages 2
    Microsoft ASP.NET Web Pages 2 Runtime
    Microsoft Exchange Web Services Managed API 2.0
    Microsoft Help Viewer 2.1
    Microsoft Identity Extensions
    Microsoft Office Access MUI (English) 2010
    Microsoft Office Access Setup Metadata MUI (English) 2010
    Microsoft Office Excel MUI (English) 2010
    Microsoft Office Home and Business 2010
    Microsoft Office Office 64-bit Components 2010
    Microsoft Office OneNote MUI (English) 2010
    Microsoft Office Outlook MUI (English) 2010
    Microsoft Office PowerPoint MUI (English) 2010
    Microsoft Office Proof (English) 2010
    Microsoft Office Proof (French) 2010
    Microsoft Office Proof (Spanish) 2010
    Microsoft Office Proofing (English) 2010
    Microsoft Office Publisher MUI (English) 2010
    Microsoft Office Shared 64-bit MUI (English) 2010
    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
    Microsoft Office Shared MUI (English) 2010
    Microsoft Office Shared Setup Metadata MUI (English) 2010
    Microsoft Office Single Image 2010
    Microsoft Office Word MUI (English) 2010
    Microsoft Silverlight
    Microsoft Silverlight 5 SDK
    Microsoft SQL Server 2008 R2 (64-bit)
    Microsoft SQL Server 2008 R2 Management Objects
    Microsoft SQL Server 2008 R2 Native Client
    Microsoft SQL Server 2008 R2 RsFx Driver
    Microsoft SQL Server 2008 R2 Setup (English)
    Microsoft SQL Server 2008 Setup Support Files
    Microsoft SQL Server 2012 Command Line Utilities
    Microsoft SQL Server 2012 Data-Tier App Framework
    Microsoft SQL Server 2012 Data-Tier App Framework (x64)
    Microsoft SQL Server 2012 Express LocalDB
    Microsoft SQL Server 2012 Management Objects
    Microsoft SQL Server 2012 Management Objects (x64)
    Microsoft SQL Server 2012 Native Client
    Microsoft SQL Server 2012 T-SQL Language Service
    Microsoft SQL Server 2012 Transact-SQL ScriptDom
    Microsoft SQL Server Browser
    Microsoft SQL Server Compact 4.0 SP1 Scripting Tools ENU CTP1
    Microsoft SQL Server Compact 4.0 SP1 x64 ENU
    Microsoft SQL Server Compact 4.0 Web Tools ENU
    Microsoft SQL Server Data Tools - enu (12.0.30919.1)
    Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1)
    Microsoft SQL Server System CLR Types
    Microsoft SQL Server System CLR Types (x64)
    Microsoft SQL Server VSS Writer
    Microsoft System CLR Types for SQL Server 2012
    Microsoft System CLR Types for SQL Server 2012 (x64)
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
    Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727
    Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
    Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727
    Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
    Microsoft Visual Studio 2012 Shell (Minimum)
    Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies
    Microsoft Visual Studio 2012 Shell (Minimum) Resources
    Microsoft Visual Studio Express 2012 for Web - ENU
    Microsoft Web Deploy 3.5
    Microsoft Web Platform Installer 4.5
    Microsoft WebMatrix 3
    Mozilla Firefox 33.1.1 (x86 en-GB)
    Mozilla Maintenance Service
    MSI Afterburner 2.1.0
    MySQL Connector Net 6.5.4
    NetBeans IDE 7.1.1
    node.js
    Notepad++
    NVIDIA 3D Vision Driver 311.06
    NVIDIA Control Panel 311.06
    NVIDIA Graphics Driver 311.06
    NVIDIA HD Audio Driver 1.2.18.0
    NVIDIA Install Application
    NVIDIA PhysX
    NVIDIA PhysX System Software 9.10.0514
    NVIDIA Stereoscopic 3D Driver
    NVIDIA Update 1.11.3
    NVIDIA Update Components
    Open XML SDK 2.5 for Microsoft Office
    OpenOffice.org 3.3
    PC Tune-Up
    PowerMapper 5
    PPC Campaign Generator
    Prerequisites for SSDT
    Product Improvement Study for HP Officejet 2620 series
    Quick Article Spinner
    Quick Article Submitter
    QuickArticlePro 3 .0
    Realtek Ethernet Controller Driver
    Realtek High Definition Audio Driver
    Review Writer
    RoboForm 7-8-8-5 (All Users)
    Screaming Frog SEO Spider
    Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)
    Security Update for Microsoft Excel 2010 (KB2910902) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2553154) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition
    Security Update for Microsoft Word 2010 (KB2899519) 32-Bit Edition
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
    SharePoint Client Components
    Skype Click to Call
    Skype™ 6.11
    Snagit 11
    Snap.Do
    Snap.Do Engine
    Splunk
    Spybot - Search & Destroy
    SQL Server 2008 R2 Common Files
    SQL Server 2008 R2 Database Engine Services
    SQL Server 2008 R2 Database Engine Shared
    Sql Server Customer Experience Improvement Program
    Super-Charger
    Teaming Genie
    Update for (KB2504637)
    Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
    Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition
    Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition
    Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2597089) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2837602) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2889818) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2910896) 32-Bit Edition
    Update for Microsoft OneNote 2010 (KB2597088) 32-Bit Edition
    Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
    Update for Microsoft PowerPoint 2010 (KB2880517) 32-Bit Edition
    Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
    Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition
    Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition
    Update for Microsoft Visual Studio 2012 (KB2781514)
    ValueApps
    VC 9.0 Runtime
    VideoGenie
    Visual Studio 2008 x64 Redistributables
    VLC media player 2.0.1
    WCF RIA Services V1.0 SP2
    Web CEO 11.0
    Windows Azure Authoring Tools - October 2012 Release
    Windows Azure Emulator - October 2012 Release
    Windows Azure Libraries for .NET – October 2012
    Windows Azure PowerShell - December 2012
    Winki
    XAMPP 1.7.7
    Xenu's Link Sleuth
    ZoneAlarm Antivirus
    ZoneAlarm Backup Powered by IDrive version 1.0.5 March 14, 2013
    ZoneAlarm Do Not Track Add-on 2.2.5.1213
    ZoneAlarm Extreme Security
    ZoneAlarm Find My Laptop
    ZoneAlarm Firewall
    ZoneAlarm LTD Toolbar
    ZoneAlarm Security
    ZoneAlarm Security Toolbar
    Zoom Downloader
    .
    ==== Event Viewer Messages From Past Week ========
    .
    07/01/2015 08:33:55, Error: Service Control Manager [7038] - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error: Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
    07/01/2015 08:33:55, Error: Service Control Manager [7000] - The NVIDIA Update Service Daemon service failed to start due to the following error: The service did not start due to a logon failure.
    07/01/2015 08:31:06, Error: Service Control Manager [7024] - The Apache2.2 service terminated with service-specific error Incorrect function..
    06/01/2015 15:04:32, Error: bowser [8003] - The master browser has received a server announcement from the computer LUKEFITTON-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B3151F64-97CE-4947-961E-81DAE07F1B85}. The master browser is stopping or an election is being forced.
    06/01/2015 12:33:36, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
    06/01/2015 12:26:59, Error: Microsoft-Windows-IIS-W3SVC [1004] - The World Wide Web Publishing Service (WWW Service) did not register the URL prefix http://*:80/ for site 1. The site has been disabled. The data field contains the error number.
    06/01/2015 12:26:59, Error: Microsoft-Windows-HttpEvent [15005] - Unable to bind to the underlying transport for [::]:80. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
    06/01/2015 12:25:46, Error: Service Control Manager [7023] - The Web Deployment Agent Service service terminated with the following error: %%-2146233088
    06/01/2015 12:22:42, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 12:20:55, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
    06/01/2015 12:20:55, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
    06/01/2015 08:48:16, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
    06/01/2015 08:48:15, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
    06/01/2015 08:48:13, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
    06/01/2015 08:48:13, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
    06/01/2015 08:48:07, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    06/01/2015 08:48:00, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
    06/01/2015 08:47:51, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:47, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC discache KLIF KLIM6 kltdi kneps NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Vsdatant Wanarpv6 WfpLwf
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The TrueVector Internet Monitor service depends on the Zone Alarm Firewall Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Apache2.2 service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    06/01/2015 08:46:58, Error: Service Control Manager [7038] - The MSSQL$SQLEXPRESS service was unable to log on as NT AUTHORITY\NETWORKSERVICE with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
    06/01/2015 08:46:58, Error: Service Control Manager [7000] - The Web Deployment Agent Service service failed to start due to the following error: The pipe has been ended.
    06/01/2015 08:46:58, Error: Service Control Manager [7000] - The SQL Server (SQLEXPRESS) service failed to start due to the following error: The service did not start due to a logon failure.
    06/01/2015 08:46:50, Error: Service Control Manager [7043] - The Group Policy Client service did not shut down properly after receiving a preshutdown control.
    05/01/2015 11:58:30, Error: volsnap [25] - The shadow copies of volume C: were deleted because the shadow copy storage could not grow in time. Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied.
    05/01/2015 10:47:02, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
    05/01/2015 09:42:53, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the WMI Performance Adapter service to connect.
    05/01/2015 09:42:53, Error: Service Control Manager [7000] - The WMI Performance Adapter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    .
    ==== End Of File ===========================
     
  8. Broni

    Broni Malware Annihilator Posts: 52,892   +344

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    =========================================

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2

    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Create new restore point before proceeding with the next step....
    How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

    Download [​IMG] Malwarebytes Anti-Rootkit (MBAR) to your desktop.
    • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
    • Double click on downloaded file. OK self extracting prompt.
    • MBAR will start. Click "Next" to continue.
    • Click in the following screen "Update" to obtain the latest malware definitions.
    • Once the update is complete select "Next" and click "Scan".
    • When the scan is finished and no malware has been found select "Exit".
    • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
    • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
      • "mbar-log-{date} (xx-xx-xx).txt"
      • "system-log.txt"
    NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.
     
  9. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    RogueKiller V10.1.2.0 [Jan 7 2015] by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/softwares/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Dawn Anderson [Administrator]
    Mode : Delete -- Date : 01/08/2015 09:17:01

    ¤¤¤ Processes : 1 ¤¤¤
    [PUP] (SVC) vToolbarUpdater18.1.9 -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe[7] -> Stopped

    ¤¤¤ Registry : 20 ¤¤¤
    [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E45F3E8-2683-4824-A6BE-08108022FB36} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5C66DD8-308B-4a4f-AF0A-3D04F25B5343} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | vProt : "C:\Program Files (x86)\AVG Secure Search\vprot.exe" -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
    [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
    [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

    ¤¤¤ Tasks : 3 ¤¤¤
    [Suspicious.Path] AVG-Secure-Search-Update_JUNE2013_TB_rmv.job -- C:\Windows\TEMP\{CCA6D2DC-B687-4E0D-8D36-4EF0FDB28508}.exe (--uninstall=1) -> Deleted
    [Suspicious.Path] \\0814tbUpdateInfo -- C:\ProgramData\Avg_Update_0814tb\0814tb_{7C27204D-4C76-49C2-B516-A0232AE3C0E1}.exe (/SETINFO /CMPID=0814tb /INFORETRY=3) -> Deleted
    [Suspicious.Path] \\AVG-Secure-Search-Update_JUNE2013_TB_rmv -- C:\Windows\TEMP\{CCA6D2DC-B687-4E0D-8D36-4EF0FDB28508}.exe (--uninstall=1) -> ERROR [0]

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 [Too big!] ¤¤¤

    ¤¤¤ Antirootkit : 6 (Driver: Not loaded [0xc000036b]) ¤¤¤
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetMessageA : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200031b0 (jmp 0xffffffffa946b5dd)
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetMessageW : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200031e0 (jmp 0xffffffffa946b8fe)
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - PeekMessageA : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x20003370 (jmp 0xffffffffa945d3fc)
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - PeekMessageW : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200033a0 (jmp 0xffffffffa9462de6)
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetKeyboardState : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x20002690 (jmp 0xffffffffa9443a28)
    [IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - SetKeyboardState : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200027f0 (jmp 0xffffffffa944133e)

    ¤¤¤ Web browsers : 1 ¤¤¤
    [PUP][FIREFX:Addon] z23z6yk8.default : AVG Security Toolbar [avg@toolbar] -> Not selected

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: SAMSUNG HD322GJ ATA Device +++++
    --- User ---
    [MBR] 93161c4555e232b9d3ed5f0accf2d03c
    [BSP] 817b78f60a978c98d89b55ce703b2ef0 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 305143 MB
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: SAMSUNG HD204UI ATA Device +++++
    --- User ---
    [MBR] cf5b01444e6631b734523da845d03a4f
    [BSP] 602a0cc38046cf3a62b7d8bf785afbe0 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 MB
    User = LL1 ... OK
    User = LL2 ... OK


    ============================================
    RKreport_SCN_01082015_085718.log

    MBAR came up clean.
     
  10. Broni

    Broni Malware Annihilator Posts: 52,892   +344

    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
     
  11. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Ok, so I ran combo dix while working from my laptop, once done it restarted and a window popped up saying a log file is currently being generated, it said this for 2 hours, I then restarted my PC in safe mode and tried to run it again, it ran to the end, but again when it reached the generation of the log it stayed on that window.

    after a further hour I decided contacted my security advisor and he informed me that he's never had it stall on log creation, and that it's best to inform you since it ran... and completed it's process, but locked up on the log step twice.
     
  12. Broni

    Broni Malware Annihilator Posts: 52,892   +344

    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.

    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

    [​IMG] Please download Farbar Recovery Scan Tool and save it to your Desktop.

    Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
    • Double-click to run it. When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
    • The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.
     
  13. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    # AdwCleaner v4.107 - Report created 10/01/2015 at 15:26:19
    # Updated 07/01/2015 by Xplode
    # Database : 2015-01-03.1 [Live]
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Dawn Anderson - DAWNANDERSON-PC
    # Running from : C:\Users\Dawn Anderson\Desktop\adwcleaner_4.107.exe
    # Option : Clean

    ***** [ Services ] *****

    Service Deleted : vToolbarUpdater18.1.9
    Service Deleted : pcregservice

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\AVG Secure Search
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Downloader
    Folder Deleted : C:\Program Files (x86)\AVG Secure Search
    Folder Deleted : C:\Program Files (x86)\AVG Security Toolbar
    Folder Deleted : C:\Program Files (x86)\Bench
    Folder Deleted : C:\Program Files (x86)\iLivid
    Folder Deleted : C:\Program Files (x86)\Zoom Downloader
    Folder Deleted : C:\Program Files (x86)\Check Point Software Technologies LTD
    Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Ilivid Player
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Zoom_Downloader
    Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\iBryte
    Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\DownloadManager
    Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\Check Point Software Technologies LTD
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\Funmoods
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\ValueApps
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
    Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabeihobmhlgpkcgjiloemdbofjbdcic
    File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
    File Deleted : C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\user.js
    File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
    File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
    File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
    File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage
    File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

    ***** [ Scheduled Tasks ] *****

    Task Deleted : pcreg

    ***** [ Shortcuts ] *****

    Shortcut Disinfected : C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
    Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Deleted : HKLM\SOFTWARE\Classes\ilivid
    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E5C66DD8-308B-4A4F-AF0A-3D04F25B5343}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
     
  14. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E45F3E8-2683-4824-A6BE-08108022FB36}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5C66DD8-308B-4A4F-AF0A-3D04F25B5343}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E45F3E8-2683-4824-A6BE-08108022FB36}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E45F3E8-2683-4824-A6BE-08108022FB36}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F63AAEDC-3602-49EF-AA45-262380A98980}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{250BECD2-5C43-48CF-A3C6-666338526D67}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\AVG Security Toolbar
    Key Deleted : HKCU\Software\ilivid
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKLM\SOFTWARE\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
    Key Deleted : HKLM\SOFTWARE\Bench
    Key Deleted : HKLM\SOFTWARE\ilivid
    Key Deleted : HKLM\SOFTWARE\SearchquMediabarTb
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ValueApps
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\buenosearch.com
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\isearch.avg.com
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snap.do
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snapdo.com
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.buenosearch.com

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17496

    Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
    Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

    -\\ Mozilla Firefox v34.0.5 (x86 en-GB)

    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogIsEnabled", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.AppTrackingLastCheckTime", "Mon Jun 11 2012 14:06:43 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.CTID", "CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.CurrentServerDate", "5-7-2012");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSChangedManually", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSInstall", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSProtectChoice", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSProtectCount", 1);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsAlignMode", "LTR");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsGetterLastCheckTime", "Thu Jul 05 2012 14:35:47 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DownloadReferralCookieData", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.EMailNotifierPollDate", "Thu Jul 05 2012 15:00:46 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstServerDate", "15-3-2012");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTime", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTimeFF3", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FixPageNotFoundErrors", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServerCheckInterval", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPChangedManually", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPInstall", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPProtectChoice", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPProtectCount", 8);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HasUserGlobalKeys", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomePageProtectorEnabled", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomepageBeforeUnload", "hxxp://start.funmoods.com");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.Initialize", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InitializeCommonPrefs", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationAndCookieDataSentCount", 3);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationType", "Unknown");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstalledDate", "Thu Mar 15 2012 20:28:17 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsAlertDBUpdated", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsGrouping", false);
     
  15. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsInitSetupIni", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsMulticommunity", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenThankYouPage", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenUninstallPage", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsProtectorsInit", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackReloadIntervalMM", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.10.0.1", "Fri Apr 20 2012 23:27:36 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.12.2.3", "Fri Jun 08 2012 12:42:00 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.13.0.6", "Thu Jul 05 2012 14:35:55 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LatestVersion", "3.13.0.6");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.Locale", "en");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipHeight", "83");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipWidth", "295");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MyStuffEnabledAtInstallation", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.OriginalFirstVersion", "3.10.0.1");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SavedHomepage", "hxxp://start.funmoods.com/?f=1&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchCaption", "ZoneAlarm Security Customized Web Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchEngineBeforeUnload", "ZoneAlarm Security Customized Web Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchFromAddressBarIsInit", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabEnabled", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabIntervalMM", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabLastCheckTime", "Thu Jul 05 2012 14:35:46 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorEnabled", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorToolbarDisabled", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SendProtectorDataViaLogin", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ServiceMapLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastCheckTime", "Thu Jul 05 2012 14:35:45 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastUpdate", "1339415202");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsInterval", 504);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastCheck", "Sat Jun 16 2012 14:00:29 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastUpdate", "1331805997");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ToolbarShrinkedFromSetup", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.UserID", "UN92199153291598694");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.alertChannelId", "1037922");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.globalFirstTimeInfoLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.homepageProtectorEnableByLogin", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.initDone", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.isAppTrackingManagerOn", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffEnabled", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffPublihserMinWidth", 400);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceIntervalMM", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.navigateToUrlOnSearch", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.oldAppsList", "129194820424161790,129194820424318041,111,129194820424474292,129194820424630543,129194820424786794,1000080,129538367557950003,1000034,129791241750835138,12945295665[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.revertSettingsEnabled", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorDialogDelayInSec", 10);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorEnableByLogin", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.testingCtid", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarAppMetaDataLastCheckTime", "Thu Jul 05 2012 14:35:51 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarContextMenuLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.usagesFlag", 2);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "ZoneAlarm Security Customized Web Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2645238/CT2645238", "\"98c46c2396d63dbebcb899c2c33ffa4b2\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/UK", "\"0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2645238", "\"1283468208\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "bM8wQLfFAEKgVLVF/G5zig==");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "9zRvKErdMb8hJOq85ft5Vg==");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2645238", "\"84df7a85bec3b2a3dd055a4bedea5adc\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/38/264/CT2645238/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"21ba1682b5b6825cbfd420592a540476\"");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Dawn Anderson\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\z23z6yk8.default\\conduitCommon\\modules\\3.13.0.6");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.13.0.6");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://isearch.avg.com/search?cid=%7Bf9bf71d1-e04e-4d55-a7f1-6fa0c6d265c7%7D&mid=bf7168175db647d18a935dc0e37826c1-dcb07b645d7d5b0ada0f58ed19[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Apr 19 2012 19:40:09 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.globalUserId", "1366d2a7-7f2d-48a1-8f3e-fcb4e2ee745f");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2645238");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Jul 05 2012 14:35:50 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Jul 05 2012 14:35:57 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jul 05 2012 14:35:49 GMT+0100 (GMT Daylight Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userId", "637fc4be-2ef2-4e47-9bfd-48a88b26bde0");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://start.funmoods.com/?f=1&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.3.0.49");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.comgoogle\\.\\w+yahoo\\.\\w+gmail\\.\\w+hotmail\\.\\w+live\\.\\w+isearch\\.avg\\.commysearch\\.avg\\.com");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultthis.engineName", "ZoneAlarm Security Customized Web Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "14ac3a7229b489bdc142edfdefccb080");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1420621718);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.active", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.addressbar", "NA");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb.was_copied", "true");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet_FF25_FIX", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb.was_copied", "true");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet_FF25_FIX", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.backgroundver", 52);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.changeprevious", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1420621718");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1420621718");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.expiration", "Wed Jan 07 2015 09:25:22 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.value", "%22/**/%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Wed Jan 07 2015 09:25:22 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22facebook.com%2Cnonexistantdomain.com%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Wed Jan 14 2015 09:08:48 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22GB%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1420621728");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221416920184%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.value", "%221415662837%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2214019%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1420621746756");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%2221%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%2219807600%22");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1420621727999");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.crossriderapp2258_dbWasSet", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.crossriderapp2258_dbWasSet_FF25_FIX", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.description", "I Want This!");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.domain", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.enablesearch", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.homepage", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.iframe", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "149");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Wed Jan 07 2015 15:08:43 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.lastDailyReport", "1420621722204");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.lastUpdate", "1420621720951");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.manifesturl", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.name", "I Want This");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.newtab", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.opensearch", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/2258/plugins/na/ff/plugins.json");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.pluginsversion", 74);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.publisher", "Innovative Apps");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.searchstatus", 0);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.setnewtab", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.thankyou", "hxxp://iw.antthis.com/thankyou.html");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.updateinterval", 360);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.ver", 149);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.apps", "2258");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.bic", "14ac3a7229b489bdc142edfdefccb080");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.cid", 2258);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.firstrun", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.hadappinstalled", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.installationdate", 1420621718);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.modetype", "production");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.reportInstall", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.statsDailyCounter", 1);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.SimilarSitesStorage-pid2", "26920820d788bf58");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.admin", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.aflt", "adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.cntry", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.cv", "cv5");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltLng", "EN");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltSrch", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltlng", "EN");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltsrch", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.excTlbr", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.fmupdtFirst", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hdrMd5", "170893C5262A0FF584526CF5FE32D59C");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hmpg", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hrdid", "d62ddd4e0000000000008c89a59ccf32");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.id", "d62ddd4e0000000000008c89a59ccf32");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlDay", "15410");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlRef", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlday", "15410");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlref", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.isDcmntCmplt", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.keywordurl", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.11.1619:57:39");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newTab", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newtab", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.noFFXTlbr", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.propectorlck", 107631332);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtkHmpg", 1);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtnrid", "funmoods");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.sg", "none");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.smplGrp", "none");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.smplgrp", "none");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srch", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srchprvdr", "Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrId", "base");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrid", "base");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsn", "1.5.11.16");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.11.1619:57:39");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsni", "1.5.11.16");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsnts", "1.5.11.1619:57:39");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.aflt", "adknlg");
     
  16. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dfltLng", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dfltSrch", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dnsErr", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.excTlbr", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.hmpg", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.id", "d62ddd4e0000000000008c89a59ccf32");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.instlDay", "15410");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.instlRef", "");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.newTab", true);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.prdct", "funmoods");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.tlbrId", "base");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.1619:57:39");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.Country", "United Kingdom");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.UserID", "dc7b3cef-760c-4f60-af2f-4d70a5e67ee8");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.hmpgUrl", "hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.keyWordUrl", "hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&q={searchTerms}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&")[...]
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.newTabUrl", "hxxp://search.zonealarm.com/?Source=Newtab&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.tlbrSrchUrl", "hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&&q=");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "ezLooker,pagerage,buzzdock,toprelatedtopics,twittube");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extentions.y2layers.installId", "16568d50-48fc-48e1-b5ce-ab11381c2a70");
    [z23z6yk8.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=");

    -\\ Google Chrome v

    [C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}

    *************************

    AdwCleaner[R0].txt - [55080 octets] - [10/01/2015 15:21:09]
    AdwCleaner[S0].txt - [58242 octets] - [10/01/2015 15:26:19]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [58303 octets] ##########
     
  17. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.4.1 (12.28.2014:1)
    OS: Windows 7 Home Premium x64
    Ran by Dawn Anderson on 10/01/2015 at 15:55:53.01
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files



    ~~~ Folders

    Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



    ~~~ FireFox

    Successfully deleted: [File] C:\user.js
    Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
    Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
    Successfully deleted: [Folder] C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\conduitcommon
    Successfully deleted: [Folder] C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\searchqutoolbar
    Successfully deleted the following from C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\prefs.js

    user_pref("valueApps.storage./9B+7E+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737
    user_pref("valueApps.storage./9B+7E,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D667
    user_pref("valueApps.storage./9B+7E-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7
    user_pref("valueApps.storage./9B+7E.:2z527", "247E7075313F3C2C423A7B3C3F2B732D7C7D207923332A3527292D28272F5A4F523F28413132342E34473E493B3D3E3E436E6868645F5D49716658415A4A4B4A4
    user_pref("valueApps.storage./9B+7E.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F717
    user_pref("valueApps.storage./9B+7E/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7
    user_pref("valueApps.storage./9B+7E06CG5EL8:", "6E6D6872736E6F707277");
    user_pref("valueApps.storage./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E7879747576787D242F4B49474F42357D5D5C3D");
    user_pref("valueApps.storage./9B+7E0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465
    user_pref("valueApps.storage./9B+7E1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5
    user_pref("valueApps.storage./9B+7E2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6
    user_pref("valueApps.storage./9B+7E3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7
    user_pref("valueApps.storage./9B+7E4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7
    user_pref("valueApps.storage./9B+7E5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B5
    user_pref("valueApps.storage./9B+7E6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465
    user_pref("valueApps.storage./9B+7E7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4
    user_pref("valueApps.storage./9B+7E8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4
    user_pref("valueApps.storage./9B+7E9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474
    user_pref("valueApps.storage./9B+7E:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717
    user_pref("valueApps.storage./9B+7E;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A7
    user_pref("valueApps.storage./9B+7E<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A5
    user_pref("valueApps.storage./9B+7E=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465
    user_pref("valueApps.storage./9B+7E>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707
    user_pref("valueApps.storage./9B+7E?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706
    user_pref("valueApps.storage./9B+7E@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7
    user_pref("valueApps.storage./9B+7EAx305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707
    user_pref("valueApps.storage./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
    user_pref("valueApps.storage./9B+7EBx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6
    user_pref("valueApps.storage./9B+7ECx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7
    user_pref("valueApps.storage./9B+7EDx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C575A3B243D2F2F4037426358654D595B3D685D40645F4F38514342544B56776C79616D6F51796
    user_pref("valueApps.storage./9B+7Etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527
    user_pref("valueApps.storage./9B-0?3G>D", "6F3A68706A6E71437A427948762049754E4B257D22537C2A2556552A27592527595C2D5E");
    user_pref("valueApps.storage./9B-0?3G@6:5;", "");
    user_pref("valueApps.storage./9B-0?3GFA7EF", "2B2E2C3D");
    user_pref("valueApps.storage./9B-3=3ECCJA=F>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
    user_pref("valueApps.storage./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
    user_pref("valueApps.storage./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
    user_pref("valueApps.storage./9B5BA==9CJAG", "6B6A406E6C7140407A7271734648787C4C4E207E4D");
    user_pref("valueApps.storage./9B6B11G4C56B>F;P;ANR@P", "6E6D6872736E6F707677757477");
    user_pref("valueApps.storage./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
    user_pref("valueApps.storage./9B9643G3/9E", "6A");
    user_pref("valueApps.storage./9B;45>:BI9I7IE", "2B2E2C3D");
    user_pref("valueApps.storage./9B<:222H64<", "393F352F3E");
    user_pref("valueApps.storage./9B<:222H64<L8DAJ", "6D70706E7674747976702A7974727A77757D21");
    user_pref("valueApps.storage./9B=+03EH8H8J?:", "4443");
    user_pref("valueApps.storage./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
    user_pref("valueApps.storage./9B?B0D:8AJ62<H", "6D");
    user_pref("valueApps.storage./9BA@0<0BI6A7GN:6@L?", "6C");
    user_pref("valueApps.storage.PG_ENABLE", "74727565");
    user_pref("valueApps.storage.SF_JUST_INSTALLED", "46414C5345");
    user_pref("valueApps.storage.SF_STATUS", "454E41424C4544");
    user_pref("valueApps.storage.SF_USER_ID", "6369645F3138313230313431373336353031333438323537");
    user_pref("valueApps.storage.cbfirsttime", "536174204A616E20313820323031342031373A33363A353120474D542B303030302028474D54205374616E646172642054696D6529");
    user_pref("valueApps.storage.discover-experiments-photopop", "7B226E616D65223A2270686F746F706F7031222C2276657273696F6E223A31307D");
    user_pref("valueApps.storage.discover-periodic-reports", "7B2270696E675F30223A5B313339303135333834303539312C31343430303030305D7D");
    user_pref("valueApps.storage.discover-user-id", "2233306236313737612D393632622D346133302D626439352D31656563363461643331666422");
    user_pref("valueApps.storage.ground-country-code", "22474222");
    user_pref("valueApps.storage.impression_session_counter", "31");
    user_pref("valueApps.storage.impression_session_id", "2238623363643162362D343330642D343361352D616462302D37633530336335393938373322");
    user_pref("valueApps.storage.impression_session_last_active", "31333930313535333536333333");
    user_pref("valueApps.storage.mam_gk_appStateReportTime", "31333930313533383331363133");
    user_pref("valueApps.storage.mam_gk_appsConfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A22446973636F766572222C2275726C223A22687474703A2F2F66617374636F6E74656
    user_pref("valueApps.storage.mam_gk_appsDefaultEnabled", "74727565");
    user_pref("valueApps.storage.mam_gk_calledSetupService", "31");
    user_pref("valueApps.storage.mam_gk_currentVersion", "312E31322E302E35");
    user_pref("valueApps.storage.mam_gk_first_time", "31");
    user_pref("valueApps.storage.mam_gk_lastLoginTime", "31333930313533383331393636");
    user_pref("valueApps.storage.mam_gk_localization", "7B226469616C6F674F4B223A7B2254657874223A224F4B227D2C22646D626F7831223A7B2254657874223A224465616C5C725C6E6F66207468652064617
    user_pref("valueApps.storage.mam_gk_mamEnabled", "66616C7365");
    user_pref("valueApps.storage.mam_gk_settings1.12.0.5", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313430313139222C22696E746
    user_pref("valueApps.storage.mam_gk_showWelcomeGadget", "66616C7365");
    user_pref("valueApps.storage.mam_gk_stamp", "313030395F30");
    user_pref("valueApps.storage.mam_gk_userId", "39666164323030382D656136352D343466342D616161302D376265626361393035336165");
    user_pref("valueApps.storage.mam_gk_user_approval_interacted", "");
    user_pref("valueApps.storage.url_history0001", "687474703A2F2F646F776E6C6F6164732E75706461746572736F66742E636F6D2F6765742F636C69636B2F3772666E6675786F2F3F7569643D66726131434D4
    Emptied folder: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\minidumps [15 files]



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 10/01/2015 at 16:00:20.24
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
  18. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2015
    Ran by Dawn Anderson (administrator) on DAWNANDERSON-PC on 10-01-2015 16:09:56
    Running from C:\Users\Dawn Anderson\Desktop
    Loaded Profile: Dawn Anderson (Available profiles: Dawn Anderson & UpdatusUser & Classic .NET AppPool & DefaultAppPool)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe
    (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
    (Caphyon) C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe
    (Fortinet Inc.) C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
    () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
    (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    () C:\xampp\mysql\bin\mysqld.exe
    (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
    (TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (Splunk Inc.) C:\Program Files\Splunk\bin\splunkd.exe
    (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
    (Dropbox, Inc.) C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
    (TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\TscHelp.exe
    () C:\Program Files\Splunk\bin\splunkweb.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    (Pro Softnet Corp.) C:\ZoneAlarmBackup\ZABackupTray.exe
    (Pro Softnet Corp.) C:\ZoneAlarmBackup\ZABackupBackground.exe
    (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Pro Softnet Corporation) C:\ZoneAlarmBackup\ZABackup Service.exe
    (Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
    (MSI CO.,LTD.) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
    () C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
    (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
    (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
    (TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\SnagPriv.exe
    (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
    (Dell SonicWALL, Inc.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mantispm.exe
    (TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\SnagitEditor.exe
    (Microsoft Corporation) C:\Windows\splwow64.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
    (CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
    (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
    (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7284328 2011-08-30] (Realtek Semiconductor)
    HKLM\...\Run: [CmPCIaudio] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
    HKLM\...\Run: [pcreg] => C:\Program Files\wrapper_inst\service.exe
    HKLM\...\Run: [ISW] => C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe [935544 2014-07-17] (Check Point Software Technologies LTD)
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-28] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe [303104 2011-07-06] (MSI)
    HKLM-x32\...\Run: [Live Update 5] => C:\Program Files (x86)\MSI\ControlCenter\LU5.exe [1747472 2011-09-01] ()
    HKLM-x32\...\Run: [QuickArticleSubmitter] => C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe [430080 2011-05-28] ()
    HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1279120 2012-09-27] (CANON INC.)
    HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)
    HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [134624 2014-07-23] (Check Point Software Technologies Ltd.)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
    HKLM-x32\...\Run: [] => [X]
    HKLM\...\Policies\Explorer: [HideSCAHealth] 1
    HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [IBP] => [X]
    HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
    HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [ZoneAlarm Backup Startup] => C:\ZoneAlarmBackup\ZABackupStartup.exe [177680 2010-03-11] (Pro Softnet Corporation)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 11.lnk
    ShortcutTarget: Snagit 11.lnk -> C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe (TechSmith Corporation)
    Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
    ShortcutTarget: Dropbox.lnk -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
    ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
    Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZoneAlarm Backup Tray.lnk
    ShortcutTarget: ZoneAlarm Backup Tray.lnk -> C:\ZoneAlarmBackup\ZABackupReg2ini.exe (Pro Softnet Corp.)
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
     
  19. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKU\S-1-5-21-688939681-313738502-1202394865-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-688939681-313738502-1202394865-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
    BHO: ZoneAlarm Security Engine Registrar -> {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -> C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
    BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
    BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
    BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
    BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
    BHO-x32: ZoneAlarm Security Engine Registrar -> {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -> C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
    Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
    Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
    Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
    Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
    Toolbar: HKU\.DEFAULT -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
    Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
    Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
    Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
    DPF: HKLM-x32 {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}
    DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
    Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    Tcpip\Parameters: [DhcpNameServer] 77.75.184.4 77.75.184.5

    FireFox:
    ========
    FF ProfilePath: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default
    FF SearchEngineOrder.1: Search By ZoneAlarm
    FF SelectedSearchEngine: Search By ZoneAlarm
    FF NetworkProxy: "type", 0
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
    FF Plugin: @java.com/DTPlugin,version=10.3.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=10.3.1 -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
    FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
    FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
    FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll (Fortinet Inc.)
    FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
    FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 -> C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
    FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Dawn Anderson\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
    FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
    FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @talk.google.com/O1DPlugin -> C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
    FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
    FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
    FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
    FF Extension: ZoneAlarm Do Not Track - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\Extensions\donottrack@checkpoint.com [2013-01-26]
    FF Extension: Firebug - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\Extensions\firebug@software.joehewitt.com.xpi [2012-03-14]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-18]
    FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-01-18]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-18]
    FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
    FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2013-04-23]
    FF HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
    FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.google.com/
    CHR StartupUrls: Default -> "hxxp://www.google.com/"
    CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
    CHR Profile: C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (SEOquake) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2015-01-05]
    CHR Extension: (Awesome Screenshot: Capture & Annotate) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce [2014-08-24]
    CHR Extension: (Google Drive) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-05-24]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-09]
    CHR Extension: (Hootsuite Hootlet) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgfdlplhmndoonmofmflcbiohgbkifn [2013-11-03]
    CHR Extension: (Frank Smith) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgpmafbkgcchdjehdpnfgfgbdfahapa [2015-01-05]
    CHR Extension: (YouTube) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-24]
    CHR Extension: (Adblock Plus) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-26]
    CHR Extension: (AddThis - Share & Bookmark (new)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde [2014-08-24]
    CHR Extension: (Webpage Screenshot) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-08-24]
    CHR Extension: (TypingWeb Typing Tutor) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\clcgempicojkfhpnepfecmklndooebjk [2014-08-24]
    CHR Extension: (Google Search) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-24]
    CHR Extension: (SEO Site Tools) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc [2014-08-24]
    CHR Extension: (Easy Clock) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\dplbpgapoedppajbikieafefmcceaagn [2013-07-17]
    CHR Extension: (MozBar) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2012-08-06]
    CHR Extension: (SEO SERP Workbench) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbgolklgacemnfnmkkpgekngaaggjjl [2014-08-24]
    CHR Extension: (TechSmith Snagit) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcnghgbgmemnlbckdipnmelbanpgneik [2014-08-24]
    CHR Extension: (Sprout Social) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffiilepjogcpodmgneknklaecmeoenbc [2014-08-24]
    CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2014-08-24]
    CHR Extension: (Nice Tumblr) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfdfdgcjljkdijjbaipabnalhakbcok [2014-08-24]
    CHR Extension: (AdBlock) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-06-22]
    CHR Extension: (Pin It Button) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-11-06]
    CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2015-01-05]
    CHR Extension: (Keep My Opt-Outs) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhnjdplhmcnkiecampfdgfjilccfpfoe [2014-08-24]
    CHR Extension: (Cisco WebEx Extension) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2014-11-12]
    CHR Extension: (Analytics Blocker) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmcpbefnpobogldglnlikgojpaddibgb [2014-08-24]
    CHR Extension: (Diigo Web) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipfakkakbicobflnnminhjjdkglgbmf [2014-08-24]
    CHR Extension: (YSlow) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ninejjcohidippngpapiilnmkgllmakh [2014-08-24]
    CHR Extension: (chartelligence) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\njhdcfdiifemfnfddhfjmfbkajajceag [2013-06-09]
    CHR Extension: (Google Wallet) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
    CHR Extension: (SEO for Chrome) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\oangcciaeihlfmhppegpdceadpfaoclj [2014-08-24]
    CHR Extension: (SEO SERP) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoaoaloeipdofknnaapbmdddddioklg [2014-08-24]
    CHR Extension: (MonitorTab) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl [2014-08-24]
    CHR Extension: (Diigo Web Collector - Capture and Annotate) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\oojbgadfejifecebmdnhhkbhdjaphole [2014-08-24]
    CHR Extension: (Google Reader) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-20]
    CHR Extension: (Gmail) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-24]
    CHR HKLM-x32\...\Chrome\Extension: [lphidcjgkfcoaafemgpheibnllgmmdpc] - C:\Users\Dawn Anderson\AppData\LocalLow\DownloadManager\AppData\Chrome.crx [Not Found]
    CHR HKLM-x32\...\Chrome\Extension: [niaogoecelkfjkgmdlefgifgomobeamj] - C:\Users\Dawn Anderson\AppData\LocalLow\iBryte\Implementations\playbryte\Chrome.crx [Not Found]
    CHR StartMenuInternet: Google Chrome - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\Application\chrome.exe

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-07-28] (Advanced Micro Devices, Inc.) [File not signed]
    R2 Apache2.2; c:\xampp\apache\bin\httpd.exe [18432 2011-09-10] (Apache Software Foundation) [File not signed]
    R2 AWRScheduler; C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe [134248 2013-07-15] (Caphyon)
    S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
    R2 FortiSslvpnDaemon; C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe [954080 2014-04-09] (Fortinet Inc.)
    R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
    R2 IswSvc; C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe [1144952 2014-07-17] (Check Point Software Technologies LTD)
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
    S2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [84624 2013-06-10] (Microsoft Corporation)
    R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
    R2 mysql; c:\xampp\mysql\bin\mysqld.exe [8158720 2011-09-09] () [File not signed]
    R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
    R2 Splunkd; C:\Program Files\Splunk\bin\splunkd.exe [25400584 2014-02-11] (Splunk Inc.)
    R2 splunkweb; C:\Program Files\Splunk\bin\splunkweb.exe [20232 2014-02-11] ()
    S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
    R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3596240 2014-07-23] (Check Point Software Technologies Ltd.)
    R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)
    S2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [93712 2014-07-03] (Check Point Software Technologies, Ltd.)
    R2 ZoneAlarm AntiTheft; C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe [3129480 2014-07-23] (Check Point Software Technologies Ltd.)
    R2 ZoneAlarmBackup Service; C:\ZoneAlarmBackup\ZABackup Service.exe [149008 2010-03-11] (Pro Softnet Corporation)
    S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-15] (AVG Technologies)
    S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-09-02] (Brother Industries Ltd.)
    R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-05-22] (C-Media Inc)
    R3 icsak; C:\Program Files (x86)\CheckPoint\AKL\ak\icsak.sys [48512 2014-07-17] (Check Point Software Technologies LTD)
    R2 ISWKL; C:\Program Files (x86)\CheckPoint\AKL\ISWKL.sys [54144 2014-07-17] (Check Point Software Technologies LTD)
    R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2014-06-10] (Kaspersky Lab ZAO)
    U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-06-10] (Kaspersky Lab ZAO)
    R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [490592 2014-06-10] (Kaspersky Lab ZAO)
    R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-06-10] (Kaspersky Lab ZAO)
    R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2014-06-10] (Kaspersky Lab)
    R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177760 2014-06-10] (Kaspersky Lab ZAO)
    R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys [14136 2009-10-06] (MSI)
    R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
    S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
    S3 splknetdrv; C:\Windows\System32\DRIVERS\splknetdrv-vista.sys [34816 2014-02-11] (Windows (R) Win 7 DDK provider)
    S3 splknetdrv; C:\Windows\SysWOW64\DRIVERS\splknetdrv-vista.sys [34816 2014-02-11] (Windows (R) Win 7 DDK provider)
    S3 splunkdrv-win6; C:\Windows\System32\DRIVERS\splunkdrv-win6.sys [44544 2014-02-11] (Windows (R) Win 7 DDK provider)
    S3 splunkdrv-win6; C:\Windows\SysWOW64\DRIVERS\splunkdrv-win6.sys [44544 2014-02-11] (Windows (R) Win 7 DDK provider)
    S3 SplunkMonitorNoHandle; C:\Windows\System32\DRIVERS\SplunkMonitorNoHandleDrv-vista.sys [19968 2014-02-11] (Windows (R) Win 7 DDK provider)
    S3 SplunkMonitorNoHandle; C:\Windows\SysWOW64\DRIVERS\SplunkMonitorNoHandleDrv-vista.sys [19968 2014-02-11] (Windows (R) Win 7 DDK provider)
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-01-08] ()
    R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450456 2014-07-22] (Check Point Software Technologies Ltd.)
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 MSICDSetup; \??\D:\CDriver64.sys [X]
    S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
     
  20. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-01-10 16:09 - 2015-01-10 16:13 - 00032112 _____ () C:\Users\Dawn Anderson\Desktop\FRST.txt
    2015-01-10 16:09 - 2015-01-10 16:10 - 00000000 ____D () C:\FRST
    2015-01-10 16:09 - 2015-01-10 16:09 - 02124288 _____ (Farbar) C:\Users\Dawn Anderson\Desktop\FRST64.exe
    2015-01-10 16:00 - 2015-01-10 16:00 - 00010946 _____ () C:\Users\Dawn Anderson\Desktop\JRT.txt
    2015-01-10 15:55 - 2015-01-10 15:55 - 00000000 ____D () C:\Windows\ERUNT
    2015-01-10 15:52 - 2015-01-10 15:53 - 01707939 _____ (Thisisu) C:\Users\Dawn Anderson\Desktop\JRT.exe
    2015-01-10 15:21 - 2015-01-10 15:31 - 00000000 ____D () C:\AdwCleaner
    2015-01-10 15:20 - 2015-01-10 15:20 - 02191360 _____ () C:\Users\Dawn Anderson\Desktop\adwcleaner_4.107.exe
    2015-01-09 10:19 - 2015-01-09 10:32 - 00000000 ____D () C:\ComboFix
    2015-01-09 08:37 - 2015-01-09 08:53 - 00000000 ____D () C:\Qoobox
    2015-01-09 08:37 - 2011-06-26 06:45 - 00256000 _____ () C:\Windows\PEV.exe
    2015-01-09 08:37 - 2010-11-07 17:20 - 00208896 _____ () C:\Windows\MBR.exe
    2015-01-09 08:37 - 2009-04-20 04:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
    2015-01-09 08:37 - 2000-08-31 00:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
    2015-01-09 08:37 - 2000-08-31 00:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
    2015-01-09 08:37 - 2000-08-31 00:00 - 00098816 _____ () C:\Windows\sed.exe
    2015-01-09 08:37 - 2000-08-31 00:00 - 00080412 _____ () C:\Windows\grep.exe
    2015-01-09 08:37 - 2000-08-31 00:00 - 00068096 _____ () C:\Windows\zip.exe
    2015-01-09 08:36 - 2015-01-09 09:41 - 00000000 ____D () C:\Windows\erdnt
    2015-01-09 08:33 - 2015-01-09 08:34 - 05609736 ____R (Swearware) C:\Users\Dawn Anderson\Desktop\ComboFix.exe
    2015-01-08 16:47 - 2015-01-08 16:48 - 00005544 _____ () C:\Users\Dawn Anderson\Downloads\How to Beat the Odds in AdWords with Competitive Intelligence.ics
    2015-01-08 16:15 - 2015-01-08 16:15 - 00000596 _____ () C:\Users\Dawn Anderson\Downloads\cxt_data_table_fields_2015-01-08.csv
    2015-01-08 15:06 - 2015-01-08 15:06 - 00004024 _____ () C:\Users\Dawn Anderson\Downloads\LRT Q&A Webinar for new users.ics
    2015-01-08 13:42 - 2015-01-08 13:42 - 00003935 _____ () C:\Users\Dawn Anderson\Downloads\Does Google use Topical PageRank- If so how can you see it in action-.ics
    2015-01-08 09:29 - 2015-01-08 10:31 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
    2015-01-08 09:24 - 2015-01-08 10:31 - 00000000 ____D () C:\Users\Dawn Anderson\Desktop\mbar
    2015-01-08 09:20 - 2015-01-08 09:23 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Dawn Anderson\Desktop\mbar-1.08.2.1001.exe
    2015-01-08 08:42 - 2015-01-08 08:42 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
    2015-01-08 08:41 - 2015-01-08 08:42 - 00000000 ____D () C:\ProgramData\RogueKiller
    2015-01-08 08:39 - 2015-01-08 08:41 - 15340120 _____ () C:\Users\Dawn Anderson\Desktop\RogueKiller.exe
    2015-01-07 09:19 - 2015-01-07 09:19 - 00000714 _____ () C:\Users\Dawn Anderson\Desktop\virus rince 2015.lnk
    2015-01-07 09:13 - 2015-01-07 09:13 - 00688992 ____R (Swearware) C:\Users\Dawn Anderson\Downloads\dds.com
    2015-01-06 13:22 - 2015-01-06 15:22 - 00001336 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_organic-uk.csv
    2015-01-06 13:22 - 2015-01-06 13:22 - 00016291 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_related-uk.csv
    2015-01-06 13:22 - 2015-01-06 13:22 - 00001232 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_fullsearch-uk.csv
    2015-01-05 13:41 - 2015-01-05 13:42 - 00044213 _____ () C:\Users\Dawn Anderson\Downloads\Sporting Index-MoM-Jan-v-Dec-v-Nov-Oct-V-Sep-V-Aug-V-July-V-June-V-May-V-April-2014-Rankings.xlsx
    2014-12-19 09:03 - 2014-12-13 05:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-12-19 09:03 - 2014-12-13 03:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-12-17 11:45 - 2014-12-17 11:45 - 00026624 _____ () C:\Users\Dawn Anderson\Downloads\Copy Of CV Leads logged in last 7 days - Jefferies Web17-12-14-37724.xls
    2014-12-17 11:44 - 2014-12-17 11:44 - 00023552 _____ () C:\Users\Dawn Anderson\Downloads\CV Leads logged in last 7 days - FPI17-12-14-34787.xls
    2014-12-15 11:26 - 2014-12-15 11:26 - 00001991 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
    2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\Visan
    2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\HP Photo Creations
    2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
    2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
    2014-12-15 11:23 - 2015-01-05 09:45 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\HpUpdate
    2014-12-15 11:22 - 2014-12-15 11:22 - 00003664 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Officejet 2620 series
    2014-12-15 11:21 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
    2014-12-15 11:21 - 2014-12-15 11:21 - 00002236 _____ () C:\Users\Public\Desktop\HP Officejet 2620 series.lnk
    2014-12-15 11:21 - 2014-12-15 11:21 - 00001173 _____ () C:\Users\Public\Desktop\Shop for Supplies - HP Officejet 2620 series.lnk
    2014-12-15 11:19 - 2014-12-15 11:23 - 00000000 ____D () C:\Program Files (x86)\HP
    2014-12-15 11:19 - 2014-12-15 11:19 - 00000000 ____D () C:\ProgramData\HP
    2014-12-15 11:19 - 2014-12-15 11:19 - 00000000 ____D () C:\Program Files\HP
    2014-12-15 11:16 - 2014-12-15 11:16 - 00000057 _____ () C:\ProgramData\Ament.ini
    2014-12-15 11:12 - 2014-12-15 11:26 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Local\HP
    2014-12-15 10:52 - 2014-12-15 10:52 - 00000000 ____D () C:\Windows\system32\appraiser
    2014-12-12 15:54 - 2014-10-18 02:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2014-12-12 15:54 - 2014-10-18 01:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2014-12-12 15:54 - 2014-07-07 02:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2014-12-12 15:54 - 2014-07-07 02:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2014-12-12 15:54 - 2014-07-07 02:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2014-12-12 15:54 - 2014-07-07 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2014-12-12 15:54 - 2014-07-07 01:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
    2014-12-12 15:54 - 2014-07-07 01:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
    2014-12-12 15:54 - 2014-07-07 01:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
    2014-12-12 15:54 - 2014-07-07 01:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
    2014-12-12 11:21 - 2014-11-27 01:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-12-12 11:21 - 2014-11-27 01:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-12-12 11:21 - 2014-11-22 03:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-12-12 11:21 - 2014-11-22 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-12-12 11:21 - 2014-11-22 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-12-12 11:21 - 2014-11-22 02:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-12-12 11:21 - 2014-11-22 02:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-12-12 11:21 - 2014-11-22 02:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-12-12 11:21 - 2014-11-22 02:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-12-12 11:21 - 2014-11-22 02:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-12-12 11:21 - 2014-11-22 02:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-12-12 11:21 - 2014-11-22 02:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-12-12 11:21 - 2014-11-22 02:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-12-12 11:21 - 2014-11-22 02:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-12-12 11:21 - 2014-11-22 02:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-12-12 11:21 - 2014-11-22 02:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-12-12 11:21 - 2014-11-22 02:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-12-12 11:21 - 2014-11-22 02:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-12-12 11:21 - 2014-11-22 02:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-12-12 11:21 - 2014-11-22 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-12-12 11:21 - 2014-11-22 02:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-12-12 11:21 - 2014-11-22 02:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-12-12 11:21 - 2014-11-22 02:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-12-12 11:21 - 2014-11-22 02:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-12-12 11:21 - 2014-11-22 02:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-12-12 11:21 - 2014-11-22 02:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-12-12 11:21 - 2014-11-22 02:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-12-12 11:21 - 2014-11-22 02:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-12-12 11:21 - 2014-11-22 02:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-12-12 11:21 - 2014-11-22 01:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-12-12 11:21 - 2014-11-22 01:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-12-12 11:21 - 2014-11-22 01:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-12-12 11:21 - 2014-11-22 01:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-12-12 11:21 - 2014-11-22 01:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-12-12 11:21 - 2014-11-22 01:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-12-12 11:21 - 2014-11-22 01:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-12-12 11:21 - 2014-11-22 01:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-12-12 11:21 - 2014-11-22 01:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-12-12 11:21 - 2014-11-22 01:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-12-12 11:21 - 2014-11-22 01:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-12-12 11:21 - 2014-11-22 01:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-12-12 11:21 - 2014-11-22 01:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-12-12 11:21 - 2014-11-22 01:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-12-12 11:21 - 2014-11-22 01:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-12-12 11:21 - 2014-11-22 01:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-12-12 11:21 - 2014-11-22 01:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-12-12 11:21 - 2014-11-22 01:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-12-12 11:21 - 2014-11-22 01:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-12-12 11:21 - 2014-11-22 01:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-12-12 11:21 - 2014-11-22 01:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-12-12 11:21 - 2014-11-22 01:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-12-12 11:21 - 2014-11-22 01:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-12-12 11:21 - 2014-11-22 00:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-12-12 11:21 - 2014-11-22 00:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-12-12 11:14 - 2014-12-04 02:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2014-12-12 11:14 - 2014-12-04 02:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-12-12 11:14 - 2014-12-01 23:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2014-12-12 11:14 - 2014-11-11 03:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2014-12-12 11:14 - 2014-11-11 02:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2014-12-12 11:13 - 2014-11-11 01:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2014-12-12 11:08 - 2014-10-30 02:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
    2014-12-12 11:08 - 2014-10-30 01:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
    2014-12-12 11:05 - 2014-10-03 02:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2014-12-12 11:05 - 2014-10-03 02:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2014-12-12 11:05 - 2014-10-03 02:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2014-12-12 11:05 - 2014-10-03 02:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2014-12-12 11:05 - 2014-10-03 02:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2014-12-12 11:05 - 2014-10-03 01:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2014-12-12 11:05 - 2014-10-03 01:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
    2014-12-12 11:05 - 2014-10-03 01:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
    2014-12-12 11:05 - 2014-10-03 01:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
    2014-12-12 11:05 - 2014-10-03 01:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
    2014-12-12 11:04 - 2014-11-08 03:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-12-12 11:04 - 2014-11-08 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-12-12 10:35 - 2014-12-12 11:35 - 03981488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-01-10 16:01 - 2012-03-11 18:30 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA.job
    2015-01-10 15:57 - 2009-07-14 04:45 - 00029136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-01-10 15:57 - 2009-07-14 04:45 - 00029136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-01-10 15:56 - 2013-05-26 10:59 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Local\CrashDumps
    2015-01-10 15:56 - 2012-03-12 01:36 - 01330946 _____ () C:\Windows\WindowsUpdate.log
    2015-01-10 15:48 - 2012-06-18 13:43 - 00000000 ___RD () C:\Users\Dawn Anderson\Dropbox
    2015-01-10 15:48 - 2012-04-15 16:07 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox
    2015-01-10 15:47 - 2014-09-05 20:48 - 00000000 ____D () C:\ZoneAlarmBackup
    2015-01-10 15:45 - 2013-11-01 10:42 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-01-10 15:45 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-01-10 15:44 - 2012-03-11 18:20 - 00000000 ____D () C:\ProgramData\NVIDIA
    2015-01-10 15:44 - 2010-11-21 03:47 - 00798614 _____ () C:\Windows\PFRO.log
    2015-01-10 15:44 - 2009-07-14 04:51 - 00037232 _____ () C:\Windows\setupact.log
    2015-01-10 15:34 - 2012-03-29 14:46 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-01-10 15:29 - 2013-11-01 10:42 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-01-10 15:29 - 2013-01-26 21:41 - 00001285 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2015-01-10 15:29 - 2012-03-11 18:34 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\CheckPoint
    2015-01-10 15:26 - 2012-03-11 18:30 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core.job
    2015-01-10 05:00 - 2012-03-11 19:21 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Skype
    2015-01-09 17:13 - 2012-03-17 12:27 - 00000000 ____D () C:\Users\Dawn Anderson\Documents\Outlook Files
    2015-01-09 13:57 - 2013-01-27 08:58 - 00035289 ____H () C:\Windows\SysWOW64\BTImages.dat
    2015-01-09 10:30 - 2009-07-14 02:34 - 00000215 _____ () C:\Windows\system.ini
    2015-01-09 09:40 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\rescache
    2015-01-09 08:57 - 2012-04-26 09:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2015-01-09 08:53 - 2014-02-17 10:19 - 00000000 ____D () C:\Program Files (x86)\runonce
    2015-01-09 08:53 - 2012-03-11 17:44 - 00000000 ____D () C:\Users\Dawn Anderson
    2015-01-08 09:29 - 2014-09-05 21:11 - 00135384 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-01-08 09:27 - 2014-09-05 21:09 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2015-01-08 08:37 - 2014-01-18 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-01-06 15:25 - 2013-08-15 08:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM
    2015-01-06 12:24 - 2009-07-14 05:32 - 00000000 ____D () C:\Windows\Performance
    2015-01-06 04:36 - 2010-11-21 03:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2014-12-15 12:18 - 2012-03-11 18:30 - 00002366 _____ () C:\Users\Dawn Anderson\Desktop\Google Chrome.lnk
    2014-12-15 11:37 - 2012-06-18 13:43 - 00001003 _____ () C:\Users\Dawn Anderson\Desktop\Dropbox.lnk
    2014-12-15 11:37 - 2012-04-16 19:49 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
    2014-12-15 10:52 - 2014-05-07 02:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2014-12-15 10:52 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2014-12-15 10:52 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\AppCompat
    2014-12-12 16:03 - 2012-03-14 13:53 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-12-12 15:43 - 2012-04-30 19:36 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\vlc
    2014-12-12 11:37 - 2012-03-29 14:46 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-12-12 11:35 - 2012-03-29 14:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-12-12 11:35 - 2012-03-29 14:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

    Some content of TEMP:
    ====================
    C:\Users\Dawn Anderson\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpww0zzb.dll
    C:\Users\Dawn Anderson\AppData\Local\Temp\Quarantine.exe
    C:\Users\Dawn Anderson\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-01-09 09:28

    ==================== End Of Log ============================
     
  21. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2015
    Ran by Dawn Anderson at 2015-01-10 16:15:14
    Running from C:\Users\Dawn Anderson\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: ZoneAlarm Extreme Security Antivirus (Enabled - Up to date) {23B6D20A-C2DE-B3F5-C67D-07ECD854E6A9}
    AS: ZoneAlarm Extreme Security Anti-Spyware (Enabled - Up to date) {98D733EE-E4E4-BC7B-FCCD-3C9EA3D3AC14}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    FW: ZoneAlarm Extreme Security Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
    Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
    Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
    Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
    Advanced Web Ranking (HKLM-x32\...\{B79DB1B4-8CBD-4415-8FAE-A7C0E584811F}) (Version: 10.0 - Caphyon)
    AMD Catalyst Install Manager (HKLM\...\{9AFAAEAF-7256-793D-AE2B-B4B2C5B3A807}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.)
    Artisteer 3 (HKLM-x32\...\Artisteer 3) (Version: 3.0 - Extensoft)
    BIOS Code Unlocked Technology (HKLM-x32\...\{D9B5FC5B-815A-4EE9-B7BF-08165F2A6A36}_is1) (Version: 1.0.106 - MSI)
    Brother MFL-Pro Suite MFC-440CN (HKLM-x32\...\{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}) (Version: 1.0.3.0 - Brother Industries, Ltd.)
    Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)
    Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
    Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)
    Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
    Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.)
    Canon MX520 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX520_series) (Version: 1.00 - Canon Inc.)
    Canon MX520 series On-screen Manual (HKLM-x32\...\Canon MX520 series On-screen Manual) (Version: 7.6.0 - Canon Inc.)
    Canon MX520 series User Registration (HKLM-x32\...\Canon MX520 series User Registration) (Version: - ‭Canon Inc.)
    Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.0 - Canon Inc.)
    Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
    Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
    Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.)
    Canon Speed Dial Utility (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.)
    Cisco WebEx Meetings (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
    Citrix Online Launcher (HKLM-x32\...\{E1B40232-F73B-4BF9-A819-E352CCC1EDEF}) (Version: 1.0.122 - Citrix)
    C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version: - )
    Desktop SMS (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\c5835c0d3467e909) (Version: 1.0.0.27 - Text Services)
    Dropbox (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
    EasyViewer (HKLM-x32\...\InstallShield_{EECD7B96-1416-4D3A-B12D-0D2512120C36}) (Version: 1.3.0.9 - MSI)
    EasyViewer (x32 Version: 1.3.0.9 - MSI) Hidden
    Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
    FastStone Capture 7.3 (HKLM-x32\...\FastStone Capture) (Version: 7.3 - FastStone Soft)
    FileZilla Client 3.6.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.6.0.1 - FileZilla Project)
    FortiClient SSLVPN v4.0.2300 (HKLM-x32\...\{A34DCE59-0004-0000-2300-3F8A9926B752}) (Version: 4.0.2300 - Fortinet Inc.)
    GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
    GlassFish Server Open Source Edition 3.1.2 (HKLM\...\nbi-glassfish-mod-3.1.2.23.0) (Version: - )
    Google AdWords Editor (HKLM-x32\...\{C2F536D9-91E1-4B5C-8A97-9BEB2943EFD1}) (Version: 10.4.1 - Google)
    Google Apps Migration For Microsoft Outlook® 3.1.21.46 (HKLM-x32\...\{09538C28-E130-4210-A8F3-1D175EE2DDF1}) (Version: 3.1.21.46 - Google, Inc.)
    Google Apps Sync™ for Microsoft Outlook® 3.5.385.1020 (HKLM-x32\...\{CEBBF68C-4C3F-4D9B-8482-428E01064C31}) (Version: 3.5.385.1020 - Google, Inc.)
    Google Chrome (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
    Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    GoToMeeting 5.7.0.1172 (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\GoToMeeting) (Version: 5.7.0.1172 - CitrixOnline)
    HP Officejet 2620 series Basic Device Software (HKLM\...\{66B122CE-42ED-4143-94D2-B28575A4619F}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
    HP Officejet 2620 series Help (HKLM-x32\...\{18DE383C-ADAE-4720-9A00-077239991ACA}) (Version: 31.0.0 - Hewlett Packard)
    HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    IBP 12.0.3 (HKLM-x32\...\IBP12_is1) (Version: 12.0.3 - Axandra GmbH)
    IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
    IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
    IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
    IIS URL Rewrite Module 2 (HKLM\...\{EB675D0A-2C95-405B-BEE8-B42A65D23E11}) (Version: 7.2.2 - Microsoft Corporation)
    iisnode for iis 7.x (x64) core (HKLM\...\{03BE434C-5574-4200-B840-20F2848BD1C0}) (Version: 0.1.19.0 - Microsoft Corporation)
    iisnode for iis 7.x dev package (HKLM-x32\...\{1086280C-97AB-42F7-BA69-2F83C12D1E2D}) (Version: 0.1.21.0 - Microsoft Corporation)
    import.io (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\{95981586-8D7F-49E9-9C7F-3AA704641471}_is1) (Version: 0.1 - import.io)
    Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle)
    Java(TM) 7 Update 3 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417003FF}) (Version: 7.0.30 - Oracle)
    Java(TM) SE Development Kit 7 Update 3 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170030}) (Version: 1.7.0.30 - Oracle)
    JavaFX 2.0.3 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
    JavaFX 2.0.3 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
    join.me (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\JoinMe) (Version: 1.7.0.138 - LogMeIn, Inc.)
    Live Update 5 (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 5.0.066 - MSI)
    Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
    McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
    Mendeley Desktop 1.12.2 (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Mendeley Desktop) (Version: 1.12.2 - Mendeley Ltd.)
    Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
    Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages 2 (HKLM-x32\...\{cb29be6c-39c4-493e-9da7-d585d5353714}) (Version: 2.0.20715.0 - Microsoft Corporation)
    Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
    Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
    Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{471AAD2C-9078-4DAC-BD43-FA10FB7C3FCE}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{6D10FB2C-82A9-40F2-91D0-7BE64CF0DAF2}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 SP1 Scripting Tools ENU CTP1 (HKLM-x32\...\{82284382-30E3-4DED-980B-746278DA6CC2}) (Version: 4.0.8854.1 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 Web Tools ENU (HKLM-x32\...\{A51500FE-6408-4305-B071-B961F691A4CE}) (Version: 4.0.8482.1 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
    Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
    Microsoft Visual Studio Express 2012 for Web - ENU (HKLM-x32\...\{4bd1cdab-bf82-42c1-af37-e4918141913f}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
    Microsoft Web Platform Installer 4.5 (HKLM\...\{458707CD-9D7A-477F-B925-02242A29673B}) (Version: 4.0.1863 - Microsoft Corporation)
    Microsoft WebMatrix 3 (HKLM-x32\...\{E03D06BD-D94B-46D0-9FD9-35FE36106C89}) (Version: 2.0.1920 - Microsoft Corporation)
    Mozilla Firefox 34.0.5 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-GB)) (Version: 34.0.5 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
    MSI Afterburner 2.1.0 (HKLM-x32\...\Afterburner) (Version: 2.1.0 - MSI Co., LTD)
    MySQL Connector Net 6.5.4 (HKLM-x32\...\{92E19B5A-1985-49BF-9022-9CF4AD652C72}) (Version: 6.5.4 - Oracle)
    NetBeans IDE 7.1.1 (HKLM\...\nbi-nb-base-7.1.1.0.0) (Version: 7.1.1 - NetBeans.org)
    node.js (HKLM-x32\...\{BD99B630-E3FF-4DB5-AA19-BC9990021429}) (Version: 0.6.20 - Joyent, Inc)
    Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.8 - )
    NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
    NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.2.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.18.0 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
    NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
    Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
    OpenOffice.org 3.3 (HKLM-x32\...\{82AF3E91-57E1-4754-84D0-40A46E2479AB}) (Version: 3.3.9567 - OpenOffice.org)
    PC Tune-Up (HKLM\...\{917443c8-4fab-4c87-8ef3-ac150db4d42c}.sdb) (Version: - )
    PC Tune-Up (x32 Version: 2.2.0.1 - ZoneAlarm) Hidden
    PowerMapper 5 (HKLM-x32\...\{3A2207D8-C409-464F-BF7C-DAD779AABFA3}) (Version: 5.15.690.0 - PowerMapper Software)
    PPC Campaign Generator (HKLM-x32\...\{FD5B6F5A-853C-45B2-A8DC-87D4701B7DD4}) (Version: 2.0.50727 - JnZ Productions)
    Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Product Improvement Study for HP Officejet 2620 series (HKLM\...\{9D220B6C-7E14-4E90-9D66-421310A3C87E}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
    Quick Article Spinner (HKLM-x32\...\Quick Article Spinner) (Version: 3.0 - QuickArticlePro)
    Quick Article Submitter (HKLM-x32\...\Quick Article Submitter) (Version: - )
    QuickArticlePro 3 .0 (HKLM-x32\...\QuickArticlePro 3 .0) (Version: - )
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6449 - Realtek Semiconductor Corp.)
    Review Writer (HKLM-x32\...\ReviewWriter) (Version: 3.0 - ReviewWriter)
    RoboForm 7-8-8-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-8-8-5 - Siber Systems)
    Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 2.55 - Screaming Frog Ltd)
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
    SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden
    Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)
    Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
    Snagit 11 (HKLM-x32\...\{68723B04-57EC-11E1-A6A8-9E2D4824019B}) (Version: 11.1.0 - TechSmith Corporation)
    Snap.Do (HKLM-x32\...\{8ABED4F1-34E7-420B-9BD1-FD6FFC0BDDE1}) (Version: 1.6.1.751 - ReSoft Ltd.) <==== ATTENTION
    Snap.Do Engine (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\{64101aeb-5300-459b-a2fb-c88cabc326d7}) (Version: 1.6.1.751 - ReSoft Ltd.) <==== ATTENTION
    Splunk (HKLM\...\{3A7B396D-31A9-43A0-A4E6-1F51AD9EA6F3}) (Version: 6.0.2.196940 - Splunk, Inc.)
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
    SQL Server 2008 R2 Common Files (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Shared (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.0.111 - MSI)
    Teaming Genie (HKLM-x32\...\{AF9B9CCF-D1B4-44B4-A030-BFCF5686AA5E}_is1) (Version: 1.0.1.2 - MSI)
    Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
    VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
    VideoGenie (HKLM-x32\...\{FC54FD8D-789C-406D-BB88-F7C4421B7E83}_is1) (Version: 1.0.0.12 - MSI)
    Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
    VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN)
    WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
    Web CEO 11.0 (HKLM-x32\...\WebCEO70_is1) (Version: 11.0 - Web CEO Ltd.)
    Windows Azure Authoring Tools - October 2012 Release (HKLM\...\{8748EE66-A92C-472A-805A-A86C41D22848}) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Emulator - October 2012 Release (HKLM\...\Windows Azure Emulator - October 2012 Release) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Libraries for .NET – October 2012 (HKLM\...\{72934D7D-3379-497D-8FA4-1E28D21AFA20}) (Version: 1.8 - Microsoft Corporation)
    Windows Azure PowerShell - December 2012 (HKLM-x32\...\{25C8C323-2360-4680-B9A6-D7ED7EDA95E2}) (Version: 0.6.9 - Microsoft Corporation)
    Winki (HKLM-x32\...\{81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1) (Version: 3.2.115 - MSI)
    XAMPP 1.7.7 (HKLM-x32\...\xampp) (Version: - )
    Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
    ZoneAlarm Antivirus (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
    ZoneAlarm Backup Powered by IDrive version 1.0.5 March 14, 2013 (HKLM-x32\...\ZoneAlarm Backup Powered by IDrive_is1) (Version: 1.0.5 - ProSoftnet Corp)
    ZoneAlarm Do Not Track Add-on 2.2.5.1213 (HKLM-x32\...\ZoneAlarm Do Not Track Add-on_is1) (Version: 2.2.5.1213 - Abine)
    ZoneAlarm Extreme Security (HKLM-x32\...\ZoneAlarm Extreme Security) (Version: 13.3.052.000 - Check Point)
    ZoneAlarm Find My Laptop (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
    ZoneAlarm Firewall (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
    ZoneAlarm Security (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
    Zoom Downloader (HKLM-x32\...\Zoom Downloader) (Version: - Zoom Downloader) <==== ATTENTION!
     
  22. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\1172\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

    ==================== Restore Points =========================

    09-01-2015 13:55:55 Windows Update

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 02:34 - 2015-01-09 09:37 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1 localhost

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {15C42F10-6E73-402B-B207-EA4E6E94C58C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
    Task: {16174CA6-14FF-4FE2-94C4-C9293BC293D5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01] (Google Inc.)
    Task: {37018247-ED46-4A18-8A28-20867EF09B8F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01] (Google Inc.)
    Task: {49FA0F89-6021-4B6F-AA9F-89C4785CA714} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
    Task: {765DAA04-E2D5-4D33-92EC-59AD2380D71A} - System32\Tasks\{2019D873-1025-4DBD-AC41-BC69665BAC7C} => Chrome.exe http://ui.skype.com/ui/0/6.18.0.105/en/abandoninstall?page=tsProgressBar
    Task: {85D746CB-A851-4BC3-BD1F-C43EB50FD2FB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
    Task: {9428D095-47A8-48A8-9F7E-0683E3F0EDC1} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/test-pass.h...JIIBJPNOLBJLJKJNIMIAJBJJNKJCMJNNICMJNDJCMKJBJ"
    Task: {9A3A16EB-8588-4CA5-8FC3-40744243A6EA} - System32\Tasks\{A1111620-7EF8-4C9F-AA55-722FD423233F} => pcalua.exe -a "C:\Users\Dawn Anderson\AppData\Local\Temp\Temp1_PPCCampaignGenerator_Setup_2.92.zip\PPC_Campaign_Generator_setup\PPC Campaign Generator setup.exe"
    Task: {E9770869-DB0E-4817-9F40-9B9DDF6AF7A3} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-04-23] (Siber Systems)
    Task: {F047A827-89C7-424B-B1C3-A25C77629F5E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-12] (Adobe Systems Incorporated)
    Task: {FAFB1298-57C3-4B09-81D7-FA9E6372F2EA} - System32\Tasks\HPCustParticipation HP Officejet 2620 series => C:\Program Files\HP\HP Officejet 2620 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core.job => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA.job => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe

    ==================== Loaded Modules (whitelisted) =============

    2012-11-19 03:04 - 2013-01-18 15:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2013-08-15 09:06 - 2012-03-28 13:19 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
    2014-09-11 09:41 - 2014-05-08 12:39 - 00014632 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mlfhook64.dll
    2011-09-09 17:46 - 2011-09-09 17:46 - 08158720 _____ () c:\xampp\mysql\bin\mysqld.exe
    2014-02-11 17:33 - 2014-02-11 17:33 - 01305352 _____ () C:\Program Files\Splunk\bin\libxml2.dll
    2014-02-11 17:33 - 2014-02-11 17:33 - 00229128 _____ () C:\Program Files\Splunk\bin\libxslt.dll
    2014-02-11 17:33 - 2014-02-11 17:33 - 00666376 _____ () C:\Program Files\Splunk\bin\archive.dll
    2014-02-11 17:33 - 2014-02-11 17:33 - 00020232 _____ () C:\Program Files\Splunk\bin\splunkweb.exe
    2014-02-11 17:33 - 2014-02-11 17:33 - 00142600 _____ () C:\Program Files\Splunk\bin\pywintypes27.dll
    2014-02-11 17:33 - 2014-02-11 17:33 - 00037128 _____ () C:\Program Files\Splunk\bin\servicemanager.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00057608 _____ () C:\Program Files\Splunk\bin\win32service.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00132360 _____ () C:\Program Files\Splunk\bin\win32api.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00013576 _____ () C:\Program Files\Splunk\bin\_win32sysloader.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00028424 _____ () C:\Program Files\Splunk\bin\win32event.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00053000 _____ () C:\Program Files\Splunk\bin\_socket.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00033032 _____ () C:\Program Files\Splunk\bin\_ssl.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00171272 _____ () C:\Program Files\Splunk\bin\_elementtree.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00169224 _____ () C:\Program Files\Splunk\bin\pyexpat.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 01009928 _____ () C:\Program Files\Splunk\bin\etree.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00082184 _____ () C:\Program Files\Splunk\bin\libexslt.dll
    2014-02-11 17:33 - 2014-02-11 17:33 - 00017160 _____ () C:\Program Files\Splunk\bin\select.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00116488 _____ () C:\Program Files\Splunk\bin\_ctypes.pyd
    2014-02-11 17:34 - 2014-02-11 17:34 - 00143112 _____ () C:\Program Files\Splunk\bin\win32file.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00696072 _____ () C:\Program Files\Splunk\bin\unicodedata.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00017160 _____ () C:\Program Files\Splunk\bin\rand.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00063240 _____ () C:\Program Files\Splunk\bin\crypto.pyd
    2014-02-11 17:33 - 2014-02-11 17:33 - 00052488 _____ () C:\Program Files\Splunk\bin\SSL.pyd
    2011-07-28 17:44 - 2011-07-28 17:44 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
    2012-04-23 13:56 - 2011-05-28 13:31 - 00430080 _____ () C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
    2014-09-11 09:41 - 2014-05-08 12:40 - 00111912 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\crsrpt64.dll
    2014-09-11 09:41 - 2014-05-08 12:39 - 00379176 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mtdsdk64.dll
    2014-09-11 09:41 - 2014-05-08 12:39 - 00223528 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\resources\mbzaenu64.dll
    2010-01-02 14:42 - 2010-01-02 14:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
    2014-10-22 00:22 - 2014-10-22 00:22 - 00750080 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\libGLESv2.dll
    2015-01-10 15:47 - 2015-01-10 15:47 - 00043008 _____ () c:\Users\Dawn Anderson\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpww0zzb.dll
    2014-10-22 00:22 - 2014-10-22 00:22 - 00047616 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\libEGL.dll
    2014-10-22 00:22 - 2014-10-22 00:22 - 00863744 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
    2014-10-22 00:22 - 2014-10-22 00:22 - 00200704 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
    2011-01-17 16:19 - 2012-03-12 10:27 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
    2009-07-13 21:03 - 2009-07-14 01:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
    2012-05-01 12:03 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
    2014-01-18 19:20 - 2015-01-08 08:37 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
    2014-12-12 11:35 - 2014-12-12 11:35 - 16841392 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)


    ========================= Accounts: ==========================

    Administrator (S-1-5-21-688939681-313738502-1202394865-500 - Administrator - Disabled)
    Dawn Anderson (S-1-5-21-688939681-313738502-1202394865-1000 - Administrator - Enabled) => C:\Users\Dawn Anderson
    Guest (S-1-5-21-688939681-313738502-1202394865-501 - Limited - Disabled)
    UpdatusUser (S-1-5-21-688939681-313738502-1202394865-1003 - Limited - Enabled) => C:\Users\UpdatusUser

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================

    System errors:
    =============

    Microsoft Office Sessions:
    =========================

    CodeIntegrity Errors:
    ===================================
    Date: 2015-01-09 08:53:38.038
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2015-01-09 08:53:37.901
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2015-01-06 08:55:05.918
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-01-06 08:55:05.917
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-01-06 08:55:05.916
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-01-06 08:55:03.715
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-01-06 08:55:03.713
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-01-06 08:55:03.712
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2014-12-19 09:14:24.108
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

    Date: 2014-12-19 09:14:20.352
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: AMD Athlon(tm) II X2 265 Processor
    Percentage of memory in use: 67%
    Total physical RAM: 4095.18 MB
    Available physical RAM: 1338.99 MB
    Total Pagefile: 8188.54 MB
    Available Pagefile: 4765.69 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.82 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:297.99 GB) (Free:198.62 GB) NTFS
    Drive e: (Storage) (Fixed) (Total:1863.01 GB) (Free:1858.41 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 6E76CDC9)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F1C788B6)
    Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================
     
  23. Broni

    Broni Malware Annihilator Posts: 52,892   +344

    [​IMG] Uninstall McAfee Security Scan Plus, typical foistware.

    [​IMG] Uninstall:
    - Snap.Do
    - Snap.Do Engine
    - Zoom Downloader

    [​IMG]
    Download attached fixlist.txt file and save it to the Desktop.
    NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Run FRST(FRST64) and press the Fix button just once and wait.
    The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
     

    Attached Files:

    Last edited: Jan 12, 2015
  24. dawnieando

    dawnieando TS Rookie Topic Starter Posts: 24

    Ok, I'm having a little problem, zoom downloader removed without uninstalling saying that there was nothing to uninstall and asked if I wanted to remove it from the program manager.

    Snap.Do threw up this problem

    the feature you are trying to use is on a network reasource that is unavailable.

    click ok to try again, or enter an alternate path to a folder containing the installation package 'LinkuryInstaller.msi' in the box below.

    I tried searching for the file via the windows search function, but found no results.
     
  25. Broni

    Broni Malware Annihilator Posts: 52,892   +344

    It looks like just registry leftovers.
    I adjusted "fixlist.txt" file accordingly.
    You can run the fix now.
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...