Solved Virus removal needed on business computer

dawnieando · Jan 7, 2015

After moving to a new office with my security consultant he informed me to scan my computer. after using firefox once it open two new tabs at google and after discussing the incident with my consultant he informed me to scan with malwarebytes, which required me to run it in safe mode. since it got stuck on the preliminary scans for 4 hours.

due to the number of entries he informed me to go to this website and begin the process of following the instuctions given for a through disinfection.

he also stated he trusts this website and has been a member for years.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------

the malwarebytes entrie is in the next post DDS entries are below.

dawnieando · Jan 7, 2015

Scan Date: 06/01/2015
Scan Time: 08:49:12
Logfile: Malwarebytes preliminary scan 20150601.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2015.01.05.04
Rootkit Database: v2014.12.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Dawn Anderson

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 1005288
Time Elapsed: 3 hr, 29 min, 16 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.StartSavin.A, HKU\S-1-5-21-688939681-313738502-1202394865-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{26C894E6-DB3B-453A-8E4C-CCB69336561E}, , [11f0d69316663afc4c7d20bc30d2ef11],
PUP.Optional.Softonic.A, HKU\S-1-5-21-688939681-313738502-1202394865-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, , [27da9bcec6b6c86e54f2a7c0ec178e72],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 42
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults\preferences, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale\en-US, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\widgets, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\scripts, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.SmartBar.A, C:\Users\Dawn Anderson\AppData\LocalLow\Smartbar, , [9f625712bfbdc86ec216134991728b75],

Files: 615
PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml, , [ce33c3a636469b9b0b25277b768d0ff1],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome.manifest, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\install.rdf, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\background.html, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\baseObject.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\browser.xul, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\dialog.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\main.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.xul, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\search_dialog.xul, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\asyncDB.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\background.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\browserAction.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\contextMenu.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\dbManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\dom_bg.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\fileManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefox.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefoxNotifications.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\firefoxOmnibox.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\message.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\pageAction.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\request.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\tabs.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\api\webRequest.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\console.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\consts.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\delegate.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\extensionDataStore.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\folderIOWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\httpObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\IDBWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\installer.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\logFile.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\prefs.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\progressListenerObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\registry.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\reloadObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\reports.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\requestObject.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\searchSettings.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\uninstallObserver.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\updateManager.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\utils.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\chrome\content\core\xhr.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\defaults\preferences\prefs.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\manifest.xml, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins.json, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\1000014_GPL Plugin (Loader).js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\1000015_GPL Background (BG).js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\13_CrossriderAppUtils.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\14_CrossriderUtils.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\177_crossriderDashboard.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\17_jQuery.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\182_openUrl.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\183_tabsWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\207_dbWrapper.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\47_resources_background.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\64_appApiMessage.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\72_appApiValidation.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\78_CrossriderInfo.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\plugins\98_omniCommands.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode\background.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\extensionData\userCode\extension.js, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\locale\en-US\translations.dtd, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button1.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button2.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button3.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button4.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\button5.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\crossrider_statusbar.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon128.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon16.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon24.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\icon48.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\panelarrow-up.png, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\popup.html, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\skin.css, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.CrossFire.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\crossriderapp2258@crossrider.com\skin\update.css, , [68991f4a0c70af87f80def5a41c2ea16],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome.manifest, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\install.rdf, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\manifest.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\bandoocode.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\neterror.xhtml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\partner.coupons.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\preferences.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\radiobeta.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\template.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\toolbar.htm, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\toolbar.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\vmncode.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\vmnrsswin.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search\engines.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\data\search\search.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\about.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\bandoocode.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpanel.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpaneltransparent.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxpanelwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxprefwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxtransparentwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\dtxwin.xul, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\emailnotifierproviders.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\external.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\neterror.xhtml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\vmncode.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\lib\wmpstreamer.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules\datastore.jsm, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\content\modules\nsDragAndDrop.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\babylon_logo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bandoo.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bluelite.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\bluesky.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-search-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-settings-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-widgets-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ca.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\dictionary.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\downloadcom.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\dtxlogo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ebay.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\email.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\email_on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\facebook.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\games.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred0.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred1.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred1_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred2.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred2_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred3.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred3_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred4.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred4_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphredna.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\grey.gif, , [6a97fb6e87f586b012a74e0a19eac937],

dawnieando · Jan 7, 2015

PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\ico-shield.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_amazon.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_games.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_radio_png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_seperator_png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_twitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\icon_youtube.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\images.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\imesh.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lichen.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-separator.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\mail.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\maps.bmp, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\menuseparatorback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modify-save.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modify.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\modifyhot.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\music.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\news.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\orange.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\protect-id.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-buffering.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-connecting.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-playing.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta-stopped.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\radiobeta.ico, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\relatedlinks.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-collapse.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-delete.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\btn_settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\graphred0_5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\logo-about.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\pixsy.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rsstopback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-lichen.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-expand.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-feed.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder-remove.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder-rename.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-folder.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-found.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-reload.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss-subscribe.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rss.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\rssback.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search_button_over_png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\search_button_png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\settings.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\shopping.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\siteinfo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-bluelite.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-bluesky.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin-yellow.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\skin.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\technorati.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\toolbarsplitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\translate.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\video.bmp, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\vmn.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\vmn.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\web.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\widgets-square-16px.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\wikipedia.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\yahoosearch.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\yellow.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\youtube.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\zoom.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\add.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\aol.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-dn.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-right-disabled.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-right.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\arrow-up.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-end.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-mdl_ff.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btn-start.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-divider.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-end.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-mdl_ff.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\blank.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn-widgets-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnback-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnback-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnleft-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnleft-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnright-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btnright-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\btn_slider.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\button-splitter-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\button-splitter-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\checkmark.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\chevron.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\collapse.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\comcast.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\dtx.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\edit-back-hot.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\edit-back.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\expand.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\found.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\gmail.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_cyan.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_lime.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_yellow.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\hotmail.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\ico-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\imap.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\lastsearch-thumb-back.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\loadingMid.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\lock.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\logo-separator.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\mailcom.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitem-splitter.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemback-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemback-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemleft-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemleft-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemright-down-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menuitemright-vista.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_bg-basic.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_separator_bar.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\bg-btnover-start.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\highlight_magenta.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\menu_separator_white.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\modify.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\move.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\movetarget.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\pop.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-buffering.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-connecting.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-playing.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta-stopped.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radiobeta.ico, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\reload.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\remove.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rename.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\resize-box.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rss.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rsschannelback.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\RSSLogo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\rsstabdivider.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\scroll-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\scroll-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\search-go.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\search.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\text-ellipsis.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\toolbarsplitter.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\transparent_1px.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\yahoo.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\footer.htm, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gamecategory.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gameData.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gameList.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\games.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\gametype.xsl, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\initHTML.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupGames.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupHTML.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupRSS.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\popupWidgets.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\scroll.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\panels.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupAbout.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupGames.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupRSS.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\css\popupWidgets.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\main.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\css\dialog.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\bg.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-wide-close-over.png, , [6a97fb6e87f586b012a74e0a19eac937],

dawnieando · Jan 7, 2015

PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\btn-wide-close.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\default.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-off-l.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-off-r.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-on-l.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\tab-on-r.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\transparent.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\ttlbar-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-right-resize.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-btm-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\images\win-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\default\scripts\defscript.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-dn.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-sml-drop.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-sml.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrow-up.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\arrowr-bluew5.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-aboutbox.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-btnover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bg-pnl520x390.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-back.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-drag.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-mdl-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-mdl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-moredetails.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-next-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-next.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-play-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-previous-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-previous.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-right-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-try-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-try-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\bullet-orange.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\gamethumb-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\gamethumb2-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-calendar.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-dollar.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-download.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-joystick24.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-news24.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-Add.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-download.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-Info.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\icon-shop.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\menul-bgon.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\menul-bgover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\panel-botm-noscroll.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-bg-206.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-bg.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scroll-topwin.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-disable.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollb.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-disable.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\scrollt.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-addtoolbar-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\btn-play-left-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\ico-tags.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\star_x_grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\star_x_orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\TRUSTe_about.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-detailed-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-detailed-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-thumb-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\view-thumb-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets-square-16px.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets-square-24px.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\panels\images\widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\managerpanel.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\volumeslider.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css\manager.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\css\slider.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-busy.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\bg-pnl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\collapsed_button.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\expanded_button.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation-down.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-playstation.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\ico-radio.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\music-note.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-pause-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-pause.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-play-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-btn-play.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-bg.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-buffer.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-on.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-eq-warning.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-design-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-design.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options-on.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-options.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-0.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-1.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-2.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-3.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\radio-volume-mute.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\scrollbar-handle.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\scrollbar-track.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\slider.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\slideron.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\radio\images\track.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_07.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_02.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_03.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_04.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_06.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_08.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_09.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_10.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_11.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_12.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_13.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_14.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_15.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_16.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_18.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_19.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_20.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\border_21.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\close-hot.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\close-normal.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\loadingMid.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\proxy.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\template.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\template.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\templateFF.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\uwa\throbber.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\cond999.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\icons.xml, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na-s.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na-t.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\icons\na.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\popupWeather.css, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\popupWeather.html, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\add.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png, , [6a97fb6e87f586b012a74e0a19eac937],

dawnieando · Jan 7, 2015

PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\box-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-main.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-search.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-weather.gif, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-weather.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\options\options-widgets.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-left.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-middle.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\chrome\skin\searchbar\searchbar-background-right.png, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency.dll, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency3.5.dll, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\dtTransparency3.6.dll, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency3.5.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\IdtTransparency3.6.xpt, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.Bandoo.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\components\windowmediator.js, , [6a97fb6e87f586b012a74e0a19eac937],
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "148bceed0ddacaa12aab4fb904f48b84")

, ,[a65bd09989f39e98d651a121d233b54b]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1411919041)

, ,[c839baafee8e082e6cbc348ed72e3ec2]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.active", true)

, ,[48b9adbcf5878bab190fab1724e1fb05]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.addressbar", "NA")

, ,[26dbdb8e3745cc6abc6cc4fe43c28878]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", "")

, ,[857cdc8d423af93d47e118aa6d9857a9]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet", true)

, ,[a958bdacc1bbce682cfc2d953fc69967]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet_FF25_FIX", true)

, ,[a45d6bfe9ede67cfa781457d33d2c43c]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet", true)

, ,[58a92346dca0e2549e8a744e19ec32ce]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet_FF25_FIX", true)

, ,[c43d6405bac2e74f62c6437f976efe02]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.backgroundver", 52)

, ,[1de4baafa8d43501c563635f0df8867a]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "")

, ,[c53c73f68defba7c71b7ad152adb9070]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.changeprevious", false)

, ,[7f82f8712755f14565c31ba7fa0b6e92]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[8d74fe6b205c48eeb276853dcf36d52b]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1411919041")

, ,[d9287aefa8d439fd2dfb49797293d62a]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[818039304438092dab7d7151d82d14ec]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1411919041")

, ,[fb0624450a7255e145e3d8eac83dff01]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.expiration", "Mon Jan 05 2015 10:44:22 GMT+0000 (GMT Standard Time)")

, ,[649dc4a581fb5fd733f50db5b64ff808]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.value", "%22/**/%22")

, ,[867b99d01f5dbc7a1a0ef3cf61a42cd4]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Mon Jan 05 2015 10:44:22 GMT+0000 (GMT Standard Time)")

, ,[1de4c5a4e9939f9728003c86d33212ee]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22facebook.com,[19e85514f18b979f7aae5c66de278d73]Cnonexistantdomain.com%22")

, %5
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Mon Jan 12 2015 09:44:17 GMT+0000 (GMT Standard Time)")

, ,[f30eb6b3700c0a2c40e80cb6b74e59a7]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22GB%22")

, ,[db2689e0067650e6b375279b45c018e8]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[a35e4b1ec2baa88ee048efd391748878]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1420451053")

, ,[45bcec7d63191224ce5abb0746bf30d0]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[3fc25e0b077535019791239f9a6b0cf4]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221415662837%22")

, ,[f0112b3eb2ca2e08d058e1e1a3620af6]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[25dcd792bfbd43f32206d0f21bea03fd]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22")

, ,[e51cc2a793e90e286bbdccf6bd48926e]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[09f80f5a7dff8ea8fa2e9a286d9839c7]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22,[748db3b6c7b5b18571b7a81a7491bf41]C%22sub_id%22%3A%220%22,[748db3b6c7b5b18571b7a81a7491bf41]C%22uzid%22%3A%220%22%7D")

, %5
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[4cb57beeff7dc47236f2754d53b2f10f]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.value", "%221411655994%22")

, ,[758c03663448a096a088d6ec5aab15eb]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[7d84df8abebed06683a5774bcd3819e7]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2214019%22")

, ,[d62b690084f8fa3cdb4d348e22e3738d]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[43be7aefb7c541f5b276853dda2bd32d]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1411919221966")

, ,[1de444258fedb87e131506bc8382f808]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[14ed8ddcc3b99a9c32f601c18e778080]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%2221%22")

, ,[cf3297d2a7d5162073b55a6871948977]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[f40d5b0eb9c3c175101831917f86cc34]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%221164097%22")

, ,[41c080e9e79540f61c0c665c19ec4db3]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Daylight Time)")

, ,[78892e3be696ef47a286b909d332ee12]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1411919058946")

, ,[27daf97017652313ad7b972bce370000]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.description", "I Want This!")

, ,[976a86e3542878becb5df4ce23e230d0]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.domain", "")

, ,[22df7fea80fc85b128003e8457ae7888]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.enablesearch", false)

, ,[6899d4951c60072f47e1c00259ac0bf5]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.homepage", "")

, ,[4eb3175266169a9c40e81aa8d13433cd]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.iframe", false)

, ,[07fa4c1d8fedee48d652e0e2df26e917]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[61a00f5af78537ff1414f7cbc243b54b]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22,[9c65d099f58777bf25037d452fd601ff]C%22sub_id%22%3A%220%22,[9c65d099f58777bf25037d452fd601ff]C%22uzid%22%3A%220%22%7D")

, %5
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[a85974f558241620eb3db012e0259070]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "149")

, ,[c0416207fc80ea4c220669590302659b]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[7889ed7c5527c4724edaa919ea1b649c]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0")

, ,[c53cf5746814c86e76b207bb877edd23]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[867b3a2f25570036e1471fa3778ea25e]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D")

, ,[fa0709603745a98d13151aa81fe643bd]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Mon Jan 05 2015 15:44:17 GMT+0000 (GMT Standard Time)")

, ,[02ffef7afd7f1323e7415969da2bee12]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true")

, ,[936ec4a5116b67cf52d6b111cd384cb4]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)")

, ,[c53c4e1b700c033387a1992909fc17e9]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D")

, ,[6a97ee7bc6b664d273b5c5fd040121df]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.lastDailyReport", "1420472659298")

, ,[639e551492ea9f97a97fa51dae5718e8]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.lastUpdate", "1420472659121")

, ,[d1303633b9c3053158d031918f76de22]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.manifesturl", "")

, ,[35cce584ec906ec8bf698d3556af2bd5]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.name", "I Want This")

, ,[9a675b0e7b012e080b1d942e62a31be5]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.newtab", "")

, ,[45bc80e994e895a1230581418e77da26]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.opensearch", "")

, ,[e41db7b2fd7f52e480a8cbf773923fc1]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/2258/plugins/093/ff/plugins.json")

, ,[7c8581e8f28a7eb8e345744e47be8e72]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.pluginsversion", 74)

, ,[09f842273646c86eae7a92300afb7d83]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.publisher", "Innovative Apps")

, ,[9d642247334925116abea2200ef7837d]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.searchstatus", 0)

, ,[7b86ea7f6e0ec86e0127e3df44c1d62a]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.setnewtab", false)

, ,[b64b2a3f3f3df046e345dae85ea7a957]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.thankyou", "http://iw.antthis.com/thankyou.html")

, ,[758c7bee611b072f54d411b131d4847c]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.updateinterval", 360)

, ,[23dea7c2403c7bbb1f09c8fafc0919e7]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.2258.ver", 149)

, ,[0001da8f2e4e47efff290db54bba916f]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.apps", "2258")

, ,[35cc6900b1cb5dd96cbc1aa8ac59d12f]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.bic", "148bceed0ddacaa12aab4fb904f48b84")

, ,[4bb64e1b91ebac8ab6726d557293bb45]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.cid", 2258)

, ,[a55c63067a0261d559cf3a88e025d828]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.firstrun", false)

, ,[f50c59103c405cdaf632be04ea1b7888]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.hadappinstalled", true)

, ,[35cc87e24933979fcf59dde5c63f04fc]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.installationdate", 1411919041)

, ,[679aa0c9b5c79f972107fec465a0d22e]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.modetype", "production")

, ,[ce332346c1bb5adc9395c101b74edf21]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.reportInstall", true)

, ,[19e8f772c1bb9e98b96f645ee61fea16]
PUP.Optional.CrossRider.A, C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp2258.statsDailyCounter", 3)

, ,[57aa87e23943cd69f63213afe421e818]

Physical Sectors: 0
(No malicious items detected)

(end)

dawnieando · Jan 7, 2015

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17496 BrowserJavaVersion: 1.6.0_37
Run by Dawn Anderson at 9:14:56 on 2015-01-07
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4095.897 [GMT 0:00]
.
AV: ZoneAlarm Extreme Security Antivirus *Enabled/Updated* {23B6D20A-C2DE-B3F5-C67D-07ECD854E6A9}
SP: ZoneAlarm Extreme Security Anti-Spyware *Enabled/Updated* {98D733EE-E4E4-BC7B-FCCD-3C9EA3D3AC14}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Extreme Security Firewall *Enabled* {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe
C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
c:\xampp\mysql\bin\mysqld.exe
C:\Program Files (x86)\wrapper_inst\file_to_run.exe
C:\Program Files\Splunk\bin\splunkd.exe
C:\Program Files\Splunk\bin\splunkweb.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
C:\Windows\system32\svchost.exe -k iissvcs
C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe
C:\ZoneAlarmBackup\ZABackup Service.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
C:\Program Files (x86)\TechSmith\Snagit 11\TSCHelp.exe
C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\ThreatEmulation.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\TechSmith\Snagit 11\SnagPriv.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\TechSmith\Snagit 11\snagiteditor.exe
C:\PROGRA~2\CHECKP~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\splwow64.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
C:\Program Files (x86)\Zoom Downloader\DownloadManager.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
uSearch Bar = about:blank
uSearch Page = about:blank
uSearchAssistant = about:blank
mWinlogon: Userinit = userinit.exe,
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
BHO: ZoneAlarm Do Not Track: {6E45F3E8-2683-4824-A6BE-08108022FB36} - C:\Program Files (x86)\DoNotTrackPlus\IE\DNTPAddon.dll
BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -
BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Zoom Downloader: {E5C66DD8-308B-4a4f-AF0A-3D04F25B5343} -
TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
TB: &RoboForm Toolbar: {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll
TB: ZoneAlarm Security Toolbar: {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} -
TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
uRun: [IBP] <no file>
uRunOnce: [Application Restart #4] C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session http://feed.snap.do/?publisher=Snap...cef-760c-4f60-af2f-4d70a5e67ee8&searchtype=sc
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe
mRun: [Live Update 5] C:\Program Files (x86)\MSI\ControlCenter\LU5.exe /reminder
mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
mRun: [QuickArticleSubmitter] C:\PROGRA~2\QUICKA~3\AutoSubmission.exe
mRun: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
mRun: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
mRun: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
StartupFolder: C:\Users\DAWNAN~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ZONEAL~1.LNK - C:\ZoneAlarmBackup\ZABackupReg2ini.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SNAGIT~1.LNK - C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
uPolicies-Explorer: HideSCAHealth = dword:1
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: HideSCAHealth = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 77.75.184.4 77.75.184.5
TCP: Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} : DHCPNameServer = 77.75.184.4 77.75.184.5
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
AppInit_DLLs= C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll
SSODL: WebCheck - <orphaned>
x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
x64-BHO: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -
x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll
x64-TB: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -
x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-Run: [CmPCIaudio] C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
x64-Run: [pcreg] C:\Program Files\wrapper_inst\service.exe
x64-Run: [ISW] "C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe" /icon="hidden"
x64-IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\
FF - prefs.js: browser.search.selectedEngine - Search By ZoneAlarm
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll
FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll
FF - plugin: C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Users\Dawn Anderson\AppData\Local\Citrix\Plugins\104\npappdetector.dll
FF - plugin: C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll
FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npatgpc.dll
FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npo1d.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.funmoods_i.hmpg - true
FF - user.js: extensions.funmoods_i.hmpgUrl - hxxp://start.funmoods.com/?f=1&a=adknlg
FF - user.js: extensions.funmoods_i.dfltSrch - true
FF - user.js: extensions.funmoods_i.srchPrvdr - Search
FF - user.js: extensions.funmoods_i.dnsErr - true
FF - user.js: extensions.funmoods_i.newTab - true
FF - user.js: extensions.funmoods_i.newTabUrl - hxxp://start.funmoods.com/?f=2&a=adknlg
FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=
FF - user.js: extensions.funmoods_i.id - d62ddd4e0000000000008c89a59ccf32
FF - user.js: extensions.funmoods_i.instlDay - 15410
FF - user.js: extensions.funmoods_i.vrsn - 1.5.11.16
FF - user.js: extensions.funmoods_i.vrsni - 1.5.11.16
FF - user.js: extensions.funmoods_i.vrsnTs - 1.5.11.1619:57:39
FF - user.js: extensions.funmoods_i.prtnrId - funmoods
FF - user.js: extensions.funmoods_i.prdct - funmoods
FF - user.js: extensions.funmoods_i.aflt - adknlg
FF - user.js: extensions.funmoods_i.smplGrp - none
FF - user.js: extensions.funmoods_i.tlbrId - base
FF - user.js: extensions.funmoods_i.instlRef -
FF - user.js: extensions.funmoods_i.dfltLng -
FF - user.js: extensions.funmoods_i.excTlbr - false
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
FF - user.js: extensions.autoDisableScopes - 14
FF - user.js: extensions.zonealarm_i.hmpg - true
FF - user.js: extensions.zonealarm.hmpgUrl - hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32
FF - user.js: extensions.zonealarm.newTabUrl - hxxp://search.zonealarm.com/?Source=Newtab&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32
FF - user.js: extentions.y2layers.installId - 16568d50-48fc-48e1-b5ce-ab11381c2a70
FF - user.js: extentions.y2layers.defaultEnableAppsList - ezLooker,pagerage,buzzdock,toprelatedtopics,twittube
.
FF - user.js: extensions.zonealarm.autoRvrt - false
FF - user.js: extensions.zonealarm.dfltSrch - true
FF - user.js: extensions.zonealarm.srchPrvdr - Search By ZoneAlarm
FF - user.js: extensions.zonealarm.keyWordUrl - hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&q={searchTerms}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&
FF - user.js: extensions.zonealarm_i.dnsErr - true
FF - user.js: extensions.zonealarm_i.newTab - false
FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&&q=
FF - user.js: extensions.zonealarm.id - d62ddd4e0000000000008c89a59ccf32
FF - user.js: extensions.zonealarm.appId - {C56C48A0-DA4E-46F6-9859-1553DC865F84}
FF - user.js: extensions.zonealarm.instlDay - 15731
FF - user.js: extensions.zonealarm.vrsn - 1.8.3.16
FF - user.js: extensions.zonealarm.vrsni - 1.8.3.16
FF - user.js: extensions.zonealarm_i.vrsnTs - 1.8.3.1621:08:28
FF - user.js: extensions.zonealarm.prtnrId - checkpoint
FF - user.js: extensions.zonealarm.prdct - zonealarm
FF - user.js: extensions.zonealarm.aflt - 1042
FF - user.js: extensions.zonealarm_i.smplGrp - none
FF - user.js: extensions.zonealarm.tlbrId - base2013
FF - user.js: extensions.zonealarm.instlRef - ZLN26224174455790-1001
FF - user.js: extensions.zonealarm.dfltLng - en
FF - user.js: extensions.zonealarm.excTlbr - false
FF - user.js: extensions.zonealarm.admin - false
.
============= SERVICES / DRIVERS ===============
.
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-7-23 50976]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\System32\drivers\klim6.sys [2014-9-11 29792]
R1 kltdi;kltdi;C:\Windows\System32\drivers\kltdi.sys [2014-9-11 54104]
R1 kneps;kneps;C:\Windows\System32\drivers\kneps.sys [2014-9-11 177760]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-7-28 361984]
R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-6-24 55424]
R2 AWRScheduler;Advanced Web Ranking Scheduler;C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe [2013-7-15 134248]
R2 ISWKL;ZoneAlarm AntiKeylogger ISWKL;C:\Program Files (x86)\CheckPoint\AKL\ISWKL.sys [2014-7-17 54144]
R2 RtNdPt60;Realtek NDIS Protocol Driver;C:\Windows\System32\drivers\RtNdPt60.sys [2012-3-11 27136]
R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-3-11 46136]
R3 icsak;icsak;C:\Program Files (x86)\CheckPoint\AKL\AK\icsak.sys [2014-7-17 48512]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys [2012-3-11 14136]
R3 pppop;PPPoP WAN Adapter;C:\Windows\System32\drivers\pppop64.sys [2009-7-21 42528]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-3-11 539240]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-3-11 44672]
S2 Apache2.2;Apache2.2;C:\xampp\apache\bin\httpd.exe [2011-9-10 18432]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S3 c2wts;Claims to Windows Token Service;C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2014-3-31 15768]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2);C:\Windows\System32\drivers\RtTeam60.sys [2012-3-11 50720]
S3 splknetdrv;splknetdrv;C:\Windows\System32\drivers\splknetdrv-vista.sys [2014-4-7 34816]
S3 splunkdrv-win6;Splunk Trace Kernel Mode Driver;C:\Windows\System32\drivers\splunkdrv-win6.sys [2014-4-7 44544]
S3 SplunkMonitorNoHandle;SplunkMonitorNoHandle;C:\Windows\System32\drivers\SplunkMonitorNoHandleDrv-vista.sys [2014-4-7 19968]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]
S4 RsFx0150;RsFx0150 Driver;C:\Windows\System32\drivers\RsFx0150.sys [2010-4-3 313696]
.
=============== Created Last 30 ================
.
2015-01-07 08:38:18 11870360 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B10413B-9CF3-43C4-AB15-BA5BEA71BF80}\mpengine.dll
2015-01-05 09:55:39 800368 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuuc52.dll
2015-01-05 09:55:39 220784 ----a-w- C:\Program Files (x86)\Mozilla Firefox\sandboxbroker.dll
2015-01-05 09:55:39 10397296 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icudt52.dll
2015-01-05 09:55:39 1023600 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuin52.dll
2015-01-05 09:55:38 3231832 ----a-w- C:\Program Files (x86)\Mozilla Firefox\d3dcompiler_46.dll
2014-12-19 09:03:34 144384 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-12-19 09:03:34 115712 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-12-16 14:20:14 11870360 ------w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\mpengine.dll
2014-12-15 11:26:00 -------- d-----w- C:\ProgramData\Visan
2014-12-15 11:26:00 -------- d-----w- C:\ProgramData\HP Photo Creations
2014-12-15 11:26:00 -------- d-----w- C:\Program Files (x86)\HP Photo Creations
2014-12-15 11:23:13 -------- d-----w- C:\Users\Dawn Anderson\AppData\Roaming\HpUpdate
2014-12-15 11:19:36 -------- d-----w- C:\Program Files (x86)\HP
2014-12-15 11:19:24 -------- d-----w- C:\Program Files\HP
2014-12-15 11:12:52 -------- d-----w- C:\Users\Dawn Anderson\AppData\Local\HP
2014-12-15 10:52:47 -------- d-----w- C:\Windows\System32\appraiser
2014-12-12 15:54:08 55808 ----a-w- C:\Windows\System32\rrinstaller.exe
2014-12-12 15:54:08 50176 ----a-w- C:\Windows\SysWow64\rrinstaller.exe
2014-12-12 15:54:08 3209728 ----a-w- C:\Windows\SysWow64\mf.dll
2014-12-12 15:54:08 24576 ----a-w- C:\Windows\System32\mfpmp.exe
2014-12-12 15:54:08 23040 ----a-w- C:\Windows\SysWow64\mfpmp.exe
2014-12-12 15:54:08 206848 ----a-w- C:\Windows\System32\mfps.dll
2014-12-12 15:54:08 2048 ----a-w- C:\Windows\SysWow64\mferror.dll
2014-12-12 15:54:08 2048 ----a-w- C:\Windows\System32\mferror.dll
2014-12-12 15:54:08 103424 ----a-w- C:\Windows\SysWow64\mfps.dll
2014-12-12 15:54:07 4121600 ----a-w- C:\Windows\System32\mf.dll
2014-12-12 11:14:38 830976 ----a-w- C:\Windows\System32\appraiser.dll
2014-12-12 11:14:38 192000 ----a-w- C:\Windows\System32\aepic.dll
2014-12-12 11:14:38 1232040 ----a-w- C:\Windows\System32\aitstatic.exe
2014-12-12 11:14:38 1083392 ----a-w- C:\Windows\System32\aeinv.dll
2014-12-12 11:14:35 741376 ----a-w- C:\Windows\System32\invagent.dll
2014-12-12 11:14:34 413184 ----a-w- C:\Windows\System32\generaltel.dll
2014-12-12 11:14:34 396800 ----a-w- C:\Windows\System32\devinv.dll
2014-12-12 11:14:33 227328 ----a-w- C:\Windows\System32\aepdu.dll
2014-12-12 11:14:03 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-12-12 11:14:03 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-12-12 11:13:54 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys
2014-12-12 11:08:45 165888 ----a-w- C:\Windows\System32\charmap.exe
2014-12-12 11:08:45 155136 ----a-w- C:\Windows\SysWow64\charmap.exe
2014-12-12 11:05:16 346624 ----a-w- C:\Windows\System32\WSManMigrationPlugin.dll
2014-12-12 11:05:16 310272 ----a-w- C:\Windows\System32\WsmWmiPl.dll
2014-12-12 11:05:16 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe
2014-12-12 11:05:16 248832 ----a-w- C:\Windows\SysWow64\WSManMigrationPlugin.dll
2014-12-12 11:05:16 214016 ----a-w- C:\Windows\SysWow64\WsmWmiPl.dll
2014-12-12 11:05:16 2020352 ----a-w- C:\Windows\System32\WsmSvc.dll
2014-12-12 11:05:16 198656 ----a-w- C:\Windows\SysWow64\WSManHTTPConfig.exe
2014-12-12 11:05:16 181248 ----a-w- C:\Windows\System32\WsmAuto.dll
2014-12-12 11:05:16 145920 ----a-w- C:\Windows\SysWow64\WsmAuto.dll
2014-12-12 11:05:16 1177088 ----a-w- C:\Windows\SysWow64\WsmSvc.dll
2014-12-12 11:04:02 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2014-12-12 11:04:02 2048 ----a-w- C:\Windows\System32\tzres.dll
2014-12-12 10:35:12 3981488 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2014-12-08 12:32:07 -------- d-sh--w- C:\Users\Dawn Anderson\AppData\Local\EmieBrowserModeList
.
==================== Find3M ====================
.
2015-01-06 08:49:13 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-12-12 11:35:32 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-12 11:35:32 701104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-11-24 14:04:56 275080 ------w- C:\Windows\System32\MpSigStub.exe
2014-11-22 03:06:23 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-11-22 03:06:11 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-11-22 02:50:39 66560 ----a-w- C:\Windows\System32\iesetup.dll
2014-11-22 02:50:10 580096 ----a-w- C:\Windows\System32\vbscript.dll
2014-11-22 02:49:54 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-11-22 02:48:20 88064 ----a-w- C:\Windows\System32\MshtmlDac.dll
2014-11-22 02:35:29 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-11-22 02:34:51 814080 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-11-22 02:34:07 6039552 ----a-w- C:\Windows\System32\jscript9.dll
2014-11-22 02:26:31 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-11-22 02:20:44 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-11-22 02:14:16 77824 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-11-22 02:07:43 501248 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-11-22 02:07:17 62464 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-11-22 02:06:32 47616 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-11-22 02:05:02 64000 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
2014-11-22 01:54:30 620032 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-11-22 01:47:10 1359360 ----a-w- C:\Windows\System32\mshtmlmedia.dll
2014-11-22 01:46:58 2125312 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-11-22 01:40:04 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-22 01:29:26 4299264 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-11-22 01:28:21 2358272 ----a-w- C:\Windows\System32\wininet.dll
2014-11-22 01:22:49 2052096 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-11-22 01:21:57 1155072 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
2014-11-22 01:00:20 1888256 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-11-19 04:31:16 1217192 ----a-w- C:\Windows\SysWow64\FM20.DLL
2014-11-11 03:08:52 241152 ----a-w- C:\Windows\System32\pku2u.dll
2014-11-11 03:08:48 728064 ----a-w- C:\Windows\System32\kerberos.dll
2014-11-11 02:44:32 186880 ----a-w- C:\Windows\SysWow64\pku2u.dll
2014-11-11 02:44:25 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
2014-10-25 01:57:59 77824 ----a-w- C:\Windows\System32\packager.dll
2014-10-25 01:32:37 67584 ----a-w- C:\Windows\SysWow64\packager.dll
2014-10-18 02:05:23 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2014-10-18 01:33:18 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2014-10-14 02:16:37 155064 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2014-10-14 02:13:06 683520 ----a-w- C:\Windows\System32\termsrv.dll
2014-10-14 02:13:00 3241984 ----a-w- C:\Windows\System32\msi.dll
2014-10-14 02:12:57 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
2014-10-14 02:09:31 146432 ----a-w- C:\Windows\System32\msaudite.dll
2014-10-14 02:07:31 681984 ----a-w- C:\Windows\System32\adtschema.dll
2014-10-14 01:50:47 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-10-14 01:50:41 2363904 ----a-w- C:\Windows\SysWow64\msi.dll
2014-10-14 01:49:38 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-10-14 01:47:30 146432 ----a-w- C:\Windows\SysWow64\msaudite.dll
2014-10-14 01:46:02 681984 ----a-w- C:\Windows\SysWow64\adtschema.dll
2014-10-10 00:57:42 3198976 ----a-w- C:\Windows\System32\win32k.sys
.
============= FINISH: 9:17:22.49 ===============

dawnieando · Jan 7, 2015

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 11/03/2012 17:44:27
System Uptime: 07/01/2015 08:30:19 (1 hours ago)
.
Motherboard: MSI | | 870S-C45(FX) (MS-7715)
Processor: AMD Athlon(tm) II X2 265 Processor | CPU1 | 3300/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 298 GiB total, 196.763 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 1863 GiB total, 1858.468 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
7-Zip 9.22beta
Acrobat.com
Adobe AIR
Adobe Flash Player 15 ActiveX
Adobe Flash Player 15 Plugin
Adobe Reader XI (11.0.06)
Advanced Web Ranking
AMD APP SDK Runtime
AMD Catalyst Install Manager
AMD Fuel
Artisteer 3
AVG Security Toolbar
BIOS Code Unlocked Technology
Brother MFL-Pro Suite MFC-440CN
C-Media PCI Audio Device
Canon Easy-WebPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool
Canon IJ Scan Utility
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MX520 series MP Drivers
Canon MX520 series On-screen Manual
Canon MX520 series User Registration
Canon My Image Garden
Canon My Image Garden Design Files
Canon My Printer
Canon Quick Menu
Canon Speed Dial Utility
Catalyst Control Center
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
Catalyst Control Center Profiles Mobile
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cisco WebEx Meetings
Citrix Online Launcher
Definition Update for Microsoft Office 2010 (KB2910899) 32-Bit Edition
Desktop SMS
Dropbox
EasyViewer
Entity Framework Tools for Visual Studio 2013
FastStone Capture 7.3
FileZilla Client 3.6.0.1
FortiClient SSLVPN v4.0.2300
GIMP 2.6.11
GlassFish Server Open Source Edition 3.1.2
Google AdWords Editor
Google Apps Migration For Microsoft Outlook® 3.0.19.44
Google Apps Sync™ for Microsoft Outlook® 3.5.385.1020
Google Chrome
Google Talk Plugin
Google Update Helper
GoToMeeting 5.7.0.1172
HP Officejet 2620 series Basic Device Software
HP Officejet 2620 series Help
HP Photo Creations
HP Update
IBP 12.0.3
IIS 8.0 Express
IIS Express Application Compatibility Database for x64
IIS Express Application Compatibility Database for x86
IIS URL Rewrite Module 2
iisnode for iis 7.x (x64) core
iisnode for iis 7.x dev package
import.io
Java Auto Updater
Java(TM) 6 Update 37
Java(TM) 7 Update 3 (64-bit)
Java(TM) SE Development Kit 7 Update 3 (64-bit)
JavaFX 2.0.3 (64-bit)
JavaFX 2.0.3 SDK (64-bit)
join.me
Live Update 5
Malwarebytes Anti-Malware version 2.0.2.1012
McAfee Security Scan Plus
Mendeley Desktop 1.12.2
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft .NET Framework 4.5 Multi-Targeting Pack
Microsoft .NET Framework 4.5 SDK
Microsoft .NET Framework 4.5.1
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)
Microsoft .NET Framework 4.5.1 SDK
Microsoft Application Error Reporting
Microsoft ASP.NET MVC 3
Microsoft ASP.NET MVC 4 Runtime
Microsoft ASP.NET Web Pages
Microsoft ASP.NET Web Pages 2
Microsoft ASP.NET Web Pages 2 Runtime
Microsoft Exchange Web Services Managed API 2.0
Microsoft Help Viewer 2.1
Microsoft Identity Extensions
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Business 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Silverlight
Microsoft Silverlight 5 SDK
Microsoft SQL Server 2008 R2 (64-bit)
Microsoft SQL Server 2008 R2 Management Objects
Microsoft SQL Server 2008 R2 Native Client
Microsoft SQL Server 2008 R2 RsFx Driver
Microsoft SQL Server 2008 R2 Setup (English)
Microsoft SQL Server 2008 Setup Support Files
Microsoft SQL Server 2012 Command Line Utilities
Microsoft SQL Server 2012 Data-Tier App Framework
Microsoft SQL Server 2012 Data-Tier App Framework (x64)
Microsoft SQL Server 2012 Express LocalDB
Microsoft SQL Server 2012 Management Objects
Microsoft SQL Server 2012 Management Objects (x64)
Microsoft SQL Server 2012 Native Client
Microsoft SQL Server 2012 T-SQL Language Service
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft SQL Server Browser
Microsoft SQL Server Compact 4.0 SP1 Scripting Tools ENU CTP1
Microsoft SQL Server Compact 4.0 SP1 x64 ENU
Microsoft SQL Server Compact 4.0 Web Tools ENU
Microsoft SQL Server Data Tools - enu (12.0.30919.1)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1)
Microsoft SQL Server System CLR Types
Microsoft SQL Server System CLR Types (x64)
Microsoft SQL Server VSS Writer
Microsoft System CLR Types for SQL Server 2012
Microsoft System CLR Types for SQL Server 2012 (x64)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
Microsoft Visual Studio 2012 Shell (Minimum)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies
Microsoft Visual Studio 2012 Shell (Minimum) Resources
Microsoft Visual Studio Express 2012 for Web - ENU
Microsoft Web Deploy 3.5
Microsoft Web Platform Installer 4.5
Microsoft WebMatrix 3
Mozilla Firefox 33.1.1 (x86 en-GB)
Mozilla Maintenance Service
MSI Afterburner 2.1.0
MySQL Connector Net 6.5.4
NetBeans IDE 7.1.1
node.js
Notepad++
NVIDIA 3D Vision Driver 311.06
NVIDIA Control Panel 311.06
NVIDIA Graphics Driver 311.06
NVIDIA HD Audio Driver 1.2.18.0
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX System Software 9.10.0514
NVIDIA Stereoscopic 3D Driver
NVIDIA Update 1.11.3
NVIDIA Update Components
Open XML SDK 2.5 for Microsoft Office
OpenOffice.org 3.3
PC Tune-Up
PowerMapper 5
PPC Campaign Generator
Prerequisites for SSDT
Product Improvement Study for HP Officejet 2620 series
Quick Article Spinner
Quick Article Submitter
QuickArticlePro 3 .0
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Review Writer
RoboForm 7-8-8-5 (All Users)
Screaming Frog SEO Spider
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)
Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)
Security Update for Microsoft Excel 2010 (KB2910902) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553154) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2899519) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
SharePoint Client Components
Skype Click to Call
Skype™ 6.11
Snagit 11
Snap.Do
Snap.Do Engine
Splunk
Spybot - Search & Destroy
SQL Server 2008 R2 Common Files
SQL Server 2008 R2 Database Engine Services
SQL Server 2008 R2 Database Engine Shared
Sql Server Customer Experience Improvement Program
Super-Charger
Teaming Genie
Update for (KB2504637)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597089) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837602) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition
Update for Microsoft Office 2010 (KB2889818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition
Update for Microsoft Office 2010 (KB2910896) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2597088) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2880517) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition
Update for Microsoft Visual Studio 2012 (KB2781514)
ValueApps
VC 9.0 Runtime
VideoGenie
Visual Studio 2008 x64 Redistributables
VLC media player 2.0.1
WCF RIA Services V1.0 SP2
Web CEO 11.0
Windows Azure Authoring Tools - October 2012 Release
Windows Azure Emulator - October 2012 Release
Windows Azure Libraries for .NET – October 2012
Windows Azure PowerShell - December 2012
Winki
XAMPP 1.7.7
Xenu's Link Sleuth
ZoneAlarm Antivirus
ZoneAlarm Backup Powered by IDrive version 1.0.5 March 14, 2013
ZoneAlarm Do Not Track Add-on 2.2.5.1213
ZoneAlarm Extreme Security
ZoneAlarm Find My Laptop
ZoneAlarm Firewall
ZoneAlarm LTD Toolbar
ZoneAlarm Security
ZoneAlarm Security Toolbar
Zoom Downloader
.
==== Event Viewer Messages From Past Week ========
.
07/01/2015 08:33:55, Error: Service Control Manager [7038] - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error: Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
07/01/2015 08:33:55, Error: Service Control Manager [7000] - The NVIDIA Update Service Daemon service failed to start due to the following error: The service did not start due to a logon failure.
07/01/2015 08:31:06, Error: Service Control Manager [7024] - The Apache2.2 service terminated with service-specific error Incorrect function..
06/01/2015 15:04:32, Error: bowser [8003] - The master browser has received a server announcement from the computer LUKEFITTON-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B3151F64-97CE-4947-961E-81DAE07F1B85}. The master browser is stopping or an election is being forced.
06/01/2015 12:33:36, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
06/01/2015 12:26:59, Error: Microsoft-Windows-IIS-W3SVC [1004] - The World Wide Web Publishing Service (WWW Service) did not register the URL prefix :80/[/url] for site 1. The site has been disabled. The data field contains the error number.
06/01/2015 12:26:59, Error: Microsoft-Windows-HttpEvent [15005] - Unable to bind to the underlying transport for [::]:80. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
06/01/2015 12:25:46, Error: Service Control Manager [7023] - The Web Deployment Agent Service service terminated with the following error: %%-2146233088
06/01/2015 12:22:42, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 12:20:55, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
06/01/2015 12:20:55, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
06/01/2015 08:48:16, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
06/01/2015 08:48:15, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
06/01/2015 08:48:13, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
06/01/2015 08:48:13, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
06/01/2015 08:48:07, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
06/01/2015 08:48:00, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
06/01/2015 08:47:51, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:47, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC discache KLIF KLIM6 kltdi kneps NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Vsdatant Wanarpv6 WfpLwf
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The TrueVector Internet Monitor service depends on the Zone Alarm Firewall Driver service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:47:46, Error: Service Control Manager [7001] - The Apache2.2 service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
06/01/2015 08:46:58, Error: Service Control Manager [7038] - The MSSQL$SQLEXPRESS service was unable to log on as NT AUTHORITY\NETWORKSERVICE with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
06/01/2015 08:46:58, Error: Service Control Manager [7000] - The Web Deployment Agent Service service failed to start due to the following error: The pipe has been ended.
06/01/2015 08:46:58, Error: Service Control Manager [7000] - The SQL Server (SQLEXPRESS) service failed to start due to the following error: The service did not start due to a logon failure.
06/01/2015 08:46:50, Error: Service Control Manager [7043] - The Group Policy Client service did not shut down properly after receiving a preshutdown control.
05/01/2015 11:58:30, Error: volsnap [25] - The shadow copies of volume C: were deleted because the shadow copy storage could not grow in time. Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied.
05/01/2015 10:47:02, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
05/01/2015 09:42:53, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the WMI Performance Adapter service to connect.
05/01/2015 09:42:53, Error: Service Control Manager [7000] - The WMI Performance Adapter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
.
==== End Of File ===========================

Broni · Jan 7, 2015

Welcome aboard

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

=========================================

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all the running programs
Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
Otherwise just double-click on RogueKiller.exe
Pre-scan will start. Let it finish.
Click on SCAN button.
Wait until the Status box shows Scan Finished
Click on Delete.
Wait until the Status box shows Deleting Finished.
Click on Report and copy/paste the content of the Notepad into your next reply.
RKreport.txt could also be found on your desktop.
If more than one log is produced post all logs.
If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

Create new restore point before proceeding with the next step....
How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

Download

Malwarebytes Anti-Rootkit (MBAR) to your desktop.

Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Double click on downloaded file. OK self extracting prompt.
MBAR will start. Click "Next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
- "mbar-log-{date} (xx-xx-xx).txt"
- "system-log.txt"

NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.

dawnieando · Jan 8, 2015

RogueKiller V10.1.2.0 [Jan 7 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Dawn Anderson [Administrator]
Mode : Delete -- Date : 01/08/2015 09:17:01

¤¤¤ Processes : 1 ¤¤¤
[PUP] (SVC) vToolbarUpdater18.1.9 -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe[7] -> Stopped

¤¤¤ Registry : 20 ¤¤¤
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515} -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E45F3E8-2683-4824-A6BE-08108022FB36} -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5C66DD8-308B-4a4f-AF0A-3D04F25B5343} -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | vProt : "C:\Program Files (x86)\AVG Secure Search\vprot.exe" -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\vToolbarUpdater18.1.9 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe) -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{B3151F64-97CE-4947-961E-81DAE07F1B85} | DhcpNameServer : 77.75.184.4 77.75.184.5 [UNITED KINGDOM (GB)][UNITED KINGDOM (GB)] -> Not selected
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

¤¤¤ Tasks : 3 ¤¤¤
[Suspicious.Path] AVG-Secure-Search-Update_JUNE2013_TB_rmv.job -- C:\Windows\TEMP\{CCA6D2DC-B687-4E0D-8D36-4EF0FDB28508}.exe (--uninstall=1) -> Deleted
[Suspicious.Path] \\0814tbUpdateInfo -- C:\ProgramData\Avg_Update_0814tb\0814tb_{7C27204D-4C76-49C2-B516-A0232AE3C0E1}.exe (/SETINFO /CMPID=0814tb /INFORETRY=3) -> Deleted
[Suspicious.Path] \\AVG-Secure-Search-Update_JUNE2013_TB_rmv -- C:\Windows\TEMP\{CCA6D2DC-B687-4E0D-8D36-4EF0FDB28508}.exe (--uninstall=1) -> ERROR [0]

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 6 (Driver: Not loaded [0xc000036b]) ¤¤¤
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetMessageA : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200031b0 (jmp 0xffffffffa946b5dd)
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetMessageW : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200031e0 (jmp 0xffffffffa946b8fe)
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - PeekMessageA : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x20003370 (jmp 0xffffffffa945d3fc)
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - PeekMessageW : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200033a0 (jmp 0xffffffffa9462de6)
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - GetKeyboardState : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x20002690 (jmp 0xffffffffa9443a28)
[IAT:Inl(Hook.IEAT)] (firefox.exe) USER32.dll - SetKeyboardState : C:\Program Files (x86)\CheckPoint\AKL\WOW64\AK\icsak.dll @ 0x200027f0 (jmp 0xffffffffa944133e)

¤¤¤ Web browsers : 1 ¤¤¤
[PUP][FIREFX:Addon] z23z6yk8.default : AVG Security Toolbar [avg@toolbar] -> Not selected

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: SAMSUNG HD322GJ ATA Device +++++
--- User ---
[MBR] 93161c4555e232b9d3ed5f0accf2d03c
[BSP] 817b78f60a978c98d89b55ce703b2ef0 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 305143 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SAMSUNG HD204UI ATA Device +++++
--- User ---
[MBR] cf5b01444e6631b734523da845d03a4f
[BSP] 602a0cc38046cf3a62b7d8bf785afbe0 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 MB
User = LL1 ... OK
User = LL2 ... OK

============================================
RKreport_SCN_01082015_085718.log

MBAR came up clean.

Broni · Jan 8, 2015

Please download ComboFix from Here, Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Never rename Combofix unless instructed.
Close any open browsers.
Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Close any open browsers.
WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
If the connection is not there use restore point you created prior to running Combofix.
Double click on combofix.exe & follow the prompts.

NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.

When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: https://www.techspot.com/downloads/5514-appremover.html
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.

Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try the following...

Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

Restart computer in safe mode

Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.

When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.

dawnieando · Jan 9, 2015

Ok, so I ran combo dix while working from my laptop, once done it restarted and a window popped up saying a log file is currently being generated, it said this for 2 hours, I then restarted my PC in safe mode and tried to run it again, it ran to the end, but again when it reached the generation of the log it stayed on that window.

after a further hour I decided contacted my security advisor and he informed me that he's never had it stall on log creation, and that it's best to inform you since it ran... and completed it's process, but locked up on the log step twice.

Broni · Jan 9, 2015

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.

dawnieando · Jan 10, 2015

# AdwCleaner v4.107 - Report created 10/01/2015 at 15:26:19
# Updated 07/01/2015 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Dawn Anderson - DAWNANDERSON-PC
# Running from : C:\Users\Dawn Anderson\Desktop\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : vToolbarUpdater18.1.9
Service Deleted : pcregservice

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Downloader
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\AVG Security Toolbar
Folder Deleted : C:\Program Files (x86)\Bench
Folder Deleted : C:\Program Files (x86)\iLivid
Folder Deleted : C:\Program Files (x86)\Zoom Downloader
Folder Deleted : C:\Program Files (x86)\Check Point Software Technologies LTD
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Zoom_Downloader
Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\iBryte
Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\DownloadManager
Folder Deleted : C:\Users\Dawn Anderson\AppData\LocalLow\Check Point Software Technologies LTD
Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\Funmoods
Folder Deleted : C:\Users\Dawn Anderson\AppData\Roaming\ValueApps
Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Folder Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabeihobmhlgpkcgjiloemdbofjbdcic
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\user.js
File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage
File Deleted : C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : pcreg

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKCU\Software\Google\Chrome\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\ilivid
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E5C66DD8-308B-4A4F-AF0A-3D04F25B5343}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

dawnieando · Jan 10, 2015

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5C66DD8-308B-4A4F-AF0A-3D04F25B5343}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F63AAEDC-3602-49EF-AA45-262380A98980}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{250BECD2-5C43-48CF-A3C6-666338526D67}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\AVG Security Toolbar
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Bench
Key Deleted : HKLM\SOFTWARE\ilivid
Key Deleted : HKLM\SOFTWARE\SearchquMediabarTb
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ValueApps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Toolbar
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\buenosearch.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\isearch.avg.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snap.do
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snapdo.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.buenosearch.com

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v34.0.5 (x86 en-GB)

[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogIsEnabled", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.AppTrackingLastCheckTime", "Mon Jun 11 2012 14:06:43 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.CTID", "CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.CurrentServerDate", "5-7-2012");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSChangedManually", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSInstall", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSProtectChoice", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSProtectCount", 1);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsAlignMode", "LTR");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsGetterLastCheckTime", "Thu Jul 05 2012 14:35:47 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.DownloadReferralCookieData", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.EMailNotifierPollDate", "Thu Jul 05 2012 15:00:46 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstServerDate", "15-3-2012");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTime", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTimeFF3", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.FixPageNotFoundErrors", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServerCheckInterval", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPChangedManually", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPInstall", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPProtectChoice", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPProtectCount", 8);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HasUserGlobalKeys", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomePageProtectorEnabled", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomepageBeforeUnload", "hxxp://start.funmoods.com");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.Initialize", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InitializeCommonPrefs", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationAndCookieDataSentCount", 3);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationType", "Unknown");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstalledDate", "Thu Mar 15 2012 20:28:17 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsAlertDBUpdated", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsGrouping", false);

dawnieando · Jan 10, 2015

[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsInitSetupIni", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsMulticommunity", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenThankYouPage", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenUninstallPage", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsProtectorsInit", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackReloadIntervalMM", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.10.0.1", "Fri Apr 20 2012 23:27:36 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.12.2.3", "Fri Jun 08 2012 12:42:00 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.13.0.6", "Thu Jul 05 2012 14:35:55 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.LatestVersion", "3.13.0.6");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.Locale", "en");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipHeight", "83");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipWidth", "295");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.MyStuffEnabledAtInstallation", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.OriginalFirstVersion", "3.10.0.1");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SavedHomepage", "hxxp://start.funmoods.com/?f=1&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchCaption", "ZoneAlarm Security Customized Web Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchEngineBeforeUnload", "ZoneAlarm Security Customized Web Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchFromAddressBarIsInit", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabEnabled", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabIntervalMM", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabLastCheckTime", "Thu Jul 05 2012 14:35:46 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorEnabled", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorToolbarDisabled", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SendProtectorDataViaLogin", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ServiceMapLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastCheckTime", "Thu Jul 05 2012 14:35:45 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastUpdate", "1339415202");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsInterval", 504);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastCheck", "Sat Jun 16 2012 14:00:29 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastUpdate", "1331805997");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.ToolbarShrinkedFromSetup", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.UserID", "UN92199153291598694");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.alertChannelId", "1037922");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.globalFirstTimeInfoLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.homepageProtectorEnableByLogin", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.initDone", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.isAppTrackingManagerOn", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffEnabled", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffPublihserMinWidth", 400);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceIntervalMM", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.navigateToUrlOnSearch", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.oldAppsList", "129194820424161790,129194820424318041,111,129194820424474292,129194820424630543,129194820424786794,1000080,129538367557950003,1000034,129791241750835138,12945295665[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.revertSettingsEnabled", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorDialogDelayInSec", 10);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorEnableByLogin", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.testingCtid", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarAppMetaDataLastCheckTime", "Thu Jul 05 2012 14:35:51 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarContextMenuLastCheckTime", "Thu Jul 05 2012 14:35:48 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CT2645238.usagesFlag", 2);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "ZoneAlarm Security Customized Web Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2645238/CT2645238", "\"98c46c2396d63dbebcb899c2c33ffa4b2\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/UK", "\"0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2645238", "\"1283468208\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "bM8wQLfFAEKgVLVF/G5zig==");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "9zRvKErdMb8hJOq85ft5Vg==");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2645238", "\"84df7a85bec3b2a3dd055a4bedea5adc\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/38/264/CT2645238/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"21ba1682b5b6825cbfd420592a540476\"");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Dawn Anderson\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\z23z6yk8.default\\conduitCommon\\modules\\3.13.0.6");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.13.0.6");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://isearch.avg.com/search?cid=%7Bf9bf71d1-e04e-4d55-a7f1-6fa0c6d265c7%7D&mid=bf7168175db647d18a935dc0e37826c1-dcb07b645d7d5b0ada0f58ed19[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Apr 19 2012 19:40:09 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.globalUserId", "1366d2a7-7f2d-48a1-8f3e-fcb4e2ee745f");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2645238");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Jul 05 2012 14:35:50 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Jul 05 2012 14:35:57 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jul 05 2012 14:35:49 GMT+0100 (GMT Daylight Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userId", "637fc4be-2ef2-4e47-9bfd-48a88b26bde0");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://start.funmoods.com/?f=1&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.3.0.49");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.comgoogle\\.\\w+yahoo\\.\\w+gmail\\.\\w+hotmail\\.\\w+live\\.\\w+isearch\\.avg\\.commysearch\\.avg\\.com");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultthis.engineName", "ZoneAlarm Security Customized Web Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "14ac3a7229b489bdc142edfdefccb080");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1420621718);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.active", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.addressbar", "NA");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb.was_copied", "true");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncdb_dbWasSet_FF25_FIX", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb.was_copied", "true");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.asyncinternaldb_dbWasSet_FF25_FIX", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.backgroundver", 52);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.changeprevious", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1420621718");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1420621718");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.expiration", "Wed Jan 07 2015 09:25:22 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.value", "%22/**/%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Wed Jan 07 2015 09:25:22 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22facebook.com%2Cnonexistantdomain.com%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Wed Jan 14 2015 09:08:48 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22GB%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1420621728");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221416920184%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installtime.value", "%221415662837%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2214019%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1420621746756");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%2221%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%2219807600%22");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1420621727999");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.crossriderapp2258_dbWasSet", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.crossriderapp2258_dbWasSet_FF25_FIX", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.description", "I Want This!");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.domain", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.enablesearch", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.homepage", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.iframe", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "149");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Wed Jan 07 2015 15:08:43 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0000 (GMT Standard Time)");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.lastDailyReport", "1420621722204");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.lastUpdate", "1420621720951");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.manifesturl", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.name", "I Want This");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.newtab", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.opensearch", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/2258/plugins/na/ff/plugins.json");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.pluginsversion", 74);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.publisher", "Innovative Apps");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.searchstatus", 0);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.setnewtab", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.thankyou", "hxxp://iw.antthis.com/thankyou.html");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.updateinterval", 360);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.2258.ver", 149);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.apps", "2258");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.bic", "14ac3a7229b489bdc142edfdefccb080");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.cid", 2258);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.firstrun", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.hadappinstalled", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.installationdate", 1420621718);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.modetype", "production");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.reportInstall", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.crossriderapp2258.statsDailyCounter", 1);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.SimilarSitesStorage-pid2", "26920820d788bf58");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.admin", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.aflt", "adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.cntry", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.cv", "cv5");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltLng", "EN");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltSrch", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltlng", "EN");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.dfltsrch", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.excTlbr", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.fmupdtFirst", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hdrMd5", "170893C5262A0FF584526CF5FE32D59C");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hmpg", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.hrdid", "d62ddd4e0000000000008c89a59ccf32");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.id", "d62ddd4e0000000000008c89a59ccf32");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlDay", "15410");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlRef", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlday", "15410");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.instlref", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.isDcmntCmplt", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.keywordurl", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.11.1619:57:39");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newTab", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newtab", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.noFFXTlbr", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.propectorlck", 107631332);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtkHmpg", 1);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.prtnrid", "funmoods");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.sg", "none");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.smplGrp", "none");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.smplgrp", "none");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srch", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.srchprvdr", "Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrId", "base");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrid", "base");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsn", "1.5.11.16");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.11.1619:57:39");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsni", "1.5.11.16");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods.vrsnts", "1.5.11.1619:57:39");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.aflt", "adknlg");

dawnieando · Jan 10, 2015

[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dfltLng", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dfltSrch", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.dnsErr", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.excTlbr", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.hmpg", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.id", "d62ddd4e0000000000008c89a59ccf32");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.instlDay", "15410");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.instlRef", "");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.newTab", true);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=adknlg");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.prdct", "funmoods");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.tlbrId", "base");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.1619:57:39");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.Country", "United Kingdom");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.helperbar.UserID", "dc7b3cef-760c-4f60-af2f-4d70a5e67ee8");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.hmpgUrl", "hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.keyWordUrl", "hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&q={searchTerms}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&")[...]
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.newTabUrl", "hxxp://search.zonealarm.com/?Source=Newtab&oemCode=ZLN26224174455790-1001&toolbarId=base&affiliateId=1025&Lan=en&utid=d62ddd4e0000000000008c89a59ccf32");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.tlbrSrchUrl", "hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=acbfef9b621a476fb25396cc31c194e3&tu=10GoG006J2B000c&sku=&tstsId=&ver=&&q=");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "ezLooker,pagerage,buzzdock,toprelatedtopics,twittube");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("extentions.y2layers.installId", "16568d50-48fc-48e1-b5ce-ab11381c2a70");
[z23z6yk8.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=");

-\\ Google Chrome v

[C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [55080 octets] - [10/01/2015 15:21:09]
AdwCleaner[S0].txt - [58242 octets] - [10/01/2015 15:26:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [58303 octets] ##########

dawnieando · Jan 10, 2015

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Home Premium x64
Ran by Dawn Anderson on 10/01/2015 at 15:55:53.01
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

~~~ FireFox

Successfully deleted: [File] C:\user.js
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Successfully deleted: [Folder] C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\conduitcommon
Successfully deleted: [Folder] C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\searchqutoolbar
Successfully deleted the following from C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\prefs.js

user_pref("valueApps.storage./9B+7E+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737
user_pref("valueApps.storage./9B+7E,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D667
user_pref("valueApps.storage./9B+7E-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7
user_pref("valueApps.storage./9B+7E.:2z527", "247E7075313F3C2C423A7B3C3F2B732D7C7D207923332A3527292D28272F5A4F523F28413132342E34473E493B3D3E3E436E6868645F5D49716658415A4A4B4A4
user_pref("valueApps.storage./9B+7E.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F717
user_pref("valueApps.storage./9B+7E/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7
user_pref("valueApps.storage./9B+7E06CG5EL8:", "6E6D6872736E6F707277");
user_pref("valueApps.storage./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E7879747576787D242F4B49474F42357D5D5C3D");
user_pref("valueApps.storage./9B+7E0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465
user_pref("valueApps.storage./9B+7E1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5
user_pref("valueApps.storage./9B+7E2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6
user_pref("valueApps.storage./9B+7E3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7
user_pref("valueApps.storage./9B+7E4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7
user_pref("valueApps.storage./9B+7E5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B5
user_pref("valueApps.storage./9B+7E6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465
user_pref("valueApps.storage./9B+7E7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4
user_pref("valueApps.storage./9B+7E8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4
user_pref("valueApps.storage./9B+7E9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474
user_pref("valueApps.storage./9B+7E:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717
user_pref("valueApps.storage./9B+7E;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A7
user_pref("valueApps.storage./9B+7E<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A5
user_pref("valueApps.storage./9B+7E=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465
user_pref("valueApps.storage./9B+7E>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707
user_pref("valueApps.storage./9B+7E?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706
user_pref("valueApps.storage./9B+7E@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7
user_pref("valueApps.storage./9B+7EAx305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707
user_pref("valueApps.storage./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
user_pref("valueApps.storage./9B+7EBx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6
user_pref("valueApps.storage./9B+7ECx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7
user_pref("valueApps.storage./9B+7EDx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C575A3B243D2F2F4037426358654D595B3D685D40645F4F38514342544B56776C79616D6F51796
user_pref("valueApps.storage./9B+7Etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527
user_pref("valueApps.storage./9B-0?3G>D", "6F3A68706A6E71437A427948762049754E4B257D22537C2A2556552A27592527595C2D5E");
user_pref("valueApps.storage./9B-0?3G@6:5;", "");
user_pref("valueApps.storage./9B-0?3GFA7EF", "2B2E2C3D");
user_pref("valueApps.storage./9B-3=3ECCJA=F>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
user_pref("valueApps.storage./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
user_pref("valueApps.storage./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
user_pref("valueApps.storage./9B5BA==9CJAG", "6B6A406E6C7140407A7271734648787C4C4E207E4D");
user_pref("valueApps.storage./9B6B11G4C56B>F;P;ANR@P", "6E6D6872736E6F707677757477");
user_pref("valueApps.storage./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
user_pref("valueApps.storage./9B9643G3/9E", "6A");
user_pref("valueApps.storage./9B;45>:BI9I7IE", "2B2E2C3D");
user_pref("valueApps.storage./9B<:222H64<", "393F352F3E");
user_pref("valueApps.storage./9B<:222H64<L8DAJ", "6D70706E7674747976702A7974727A77757D21");
user_pref("valueApps.storage./9B=+03EH8H8J?:", "4443");
user_pref("valueApps.storage./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
user_pref("valueApps.storage./9B?B0D:8AJ62<H", "6D");
user_pref("valueApps.storage./9BA@0<0BI6A7GN:6@L?", "6C");
user_pref("valueApps.storage.PG_ENABLE", "74727565");
user_pref("valueApps.storage.SF_JUST_INSTALLED", "46414C5345");
user_pref("valueApps.storage.SF_STATUS", "454E41424C4544");
user_pref("valueApps.storage.SF_USER_ID", "6369645F3138313230313431373336353031333438323537");
user_pref("valueApps.storage.cbfirsttime", "536174204A616E20313820323031342031373A33363A353120474D542B303030302028474D54205374616E646172642054696D6529");
user_pref("valueApps.storage.discover-experiments-photopop", "7B226E616D65223A2270686F746F706F7031222C2276657273696F6E223A31307D");
user_pref("valueApps.storage.discover-periodic-reports", "7B2270696E675F30223A5B313339303135333834303539312C31343430303030305D7D");
user_pref("valueApps.storage.discover-user-id", "2233306236313737612D393632622D346133302D626439352D31656563363461643331666422");
user_pref("valueApps.storage.ground-country-code", "22474222");
user_pref("valueApps.storage.impression_session_counter", "31");
user_pref("valueApps.storage.impression_session_id", "2238623363643162362D343330642D343361352D616462302D37633530336335393938373322");
user_pref("valueApps.storage.impression_session_last_active", "31333930313535333536333333");
user_pref("valueApps.storage.mam_gk_appStateReportTime", "31333930313533383331363133");
user_pref("valueApps.storage.mam_gk_appsConfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A22446973636F766572222C2275726C223A22687474703A2F2F66617374636F6E74656
user_pref("valueApps.storage.mam_gk_appsDefaultEnabled", "74727565");
user_pref("valueApps.storage.mam_gk_calledSetupService", "31");
user_pref("valueApps.storage.mam_gk_currentVersion", "312E31322E302E35");
user_pref("valueApps.storage.mam_gk_first_time", "31");
user_pref("valueApps.storage.mam_gk_lastLoginTime", "31333930313533383331393636");
user_pref("valueApps.storage.mam_gk_localization", "7B226469616C6F674F4B223A7B2254657874223A224F4B227D2C22646D626F7831223A7B2254657874223A224465616C5C725C6E6F66207468652064617
user_pref("valueApps.storage.mam_gk_mamEnabled", "66616C7365");
user_pref("valueApps.storage.mam_gk_settings1.12.0.5", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313430313139222C22696E746
user_pref("valueApps.storage.mam_gk_showWelcomeGadget", "66616C7365");
user_pref("valueApps.storage.mam_gk_stamp", "313030395F30");
user_pref("valueApps.storage.mam_gk_userId", "39666164323030382D656136352D343466342D616161302D376265626361393035336165");
user_pref("valueApps.storage.mam_gk_user_approval_interacted", "");
user_pref("valueApps.storage.url_history0001", "687474703A2F2F646F776E6C6F6164732E75706461746572736F66742E636F6D2F6765742F636C69636B2F3772666E6675786F2F3F7569643D66726131434D4
Emptied folder: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\firefox\profiles\z23z6yk8.default\minidumps [15 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10/01/2015 at 16:00:20.24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

dawnieando · Jan 10, 2015

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2015
Ran by Dawn Anderson (administrator) on DAWNANDERSON-PC on 10-01-2015 16:09:56
Running from C:\Users\Dawn Anderson\Desktop
Loaded Profile: Dawn Anderson (Available profiles: Dawn Anderson & UpdatusUser & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Caphyon) C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe
(Fortinet Inc.) C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\xampp\mysql\bin\mysqld.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Splunk Inc.) C:\Program Files\Splunk\bin\splunkd.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Dropbox, Inc.) C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\TscHelp.exe
() C:\Program Files\Splunk\bin\splunkweb.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Pro Softnet Corp.) C:\ZoneAlarmBackup\ZABackupTray.exe
(Pro Softnet Corp.) C:\ZoneAlarmBackup\ZABackupBackground.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Pro Softnet Corporation) C:\ZoneAlarmBackup\ZABackup Service.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
() C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\SnagPriv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Dell SonicWALL, Inc.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mantispm.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 11\SnagitEditor.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7284328 2011-08-30] (Realtek Semiconductor)
HKLM\...\Run: [CmPCIaudio] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
HKLM\...\Run: [pcreg] => C:\Program Files\wrapper_inst\service.exe
HKLM\...\Run: [ISW] => C:\Program Files (x86)\CheckPoint\AKL\AkSA.exe [935544 2014-07-17] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe [303104 2011-07-06] (MSI)
HKLM-x32\...\Run: [Live Update 5] => C:\Program Files (x86)\MSI\ControlCenter\LU5.exe [1747472 2011-09-01] ()
HKLM-x32\...\Run: [QuickArticleSubmitter] => C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe [430080 2011-05-28] ()
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1279120 2012-09-27] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [134624 2014-07-23] (Check Point Software Technologies Ltd.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [IBP] => [X]
HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Run: [ZoneAlarm Backup Startup] => C:\ZoneAlarmBackup\ZABackupStartup.exe [177680 2010-03-11] (Pro Softnet Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 11.lnk
ShortcutTarget: Snagit 11.lnk -> C:\Program Files (x86)\TechSmith\Snagit 11\Snagit32.exe (TechSmith Corporation)
Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZoneAlarm Backup Tray.lnk
ShortcutTarget: ZoneAlarm Backup Tray.lnk -> C:\ZoneAlarmBackup\ZABackupReg2ini.exe (Pro Softnet Corp.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

dawnieando · Jan 10, 2015

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-688939681-313738502-1202394865-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-688939681-313738502-1202394865-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: ZoneAlarm Security Engine Registrar -> {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -> C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: ZoneAlarm Security Engine Registrar -> {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} -> C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKU\.DEFAULT -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
Toolbar: HKU\S-1-5-21-688939681-313738502-1202394865-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
DPF: HKLM-x32 {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 77.75.184.4 77.75.184.5

FireFox:
========
FF ProfilePath: C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default
FF SearchEngineOrder.1: Search By ZoneAlarm
FF SelectedSearchEngine: Search By ZoneAlarm
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.3.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.3.1 -> C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll (Fortinet Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 -> C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Dawn Anderson\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @talk.google.com/O1DPlugin -> C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-688939681-313738502-1202394865-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Dawn Anderson\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: ZoneAlarm Do Not Track - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\Extensions\donottrack@checkpoint.com [2013-01-26]
FF Extension: Firebug - C:\Users\Dawn Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\z23z6yk8.default\Extensions\firebug@software.joehewitt.com.xpi [2012-03-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-18]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-01-18]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-18]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2013-04-23]
FF HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google

ageClassification}{google:searchVersion}{google:sessionToken}{google

refetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SEOquake) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2015-01-05]
CHR Extension: (Awesome Screenshot: Capture & Annotate) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce [2014-08-24]
CHR Extension: (Google Drive) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-05-24]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-09]
CHR Extension: (Hootsuite Hootlet) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgfdlplhmndoonmofmflcbiohgbkifn [2013-11-03]
CHR Extension: (Frank Smith) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgpmafbkgcchdjehdpnfgfgbdfahapa [2015-01-05]
CHR Extension: (YouTube) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-24]
CHR Extension: (Adblock Plus) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-26]
CHR Extension: (AddThis - Share & Bookmark (new)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbogdmdefihhljhfeiklfiedefalcde [2014-08-24]
CHR Extension: (Webpage Screenshot) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-08-24]
CHR Extension: (TypingWeb Typing Tutor) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\clcgempicojkfhpnepfecmklndooebjk [2014-08-24]
CHR Extension: (Google Search) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-24]
CHR Extension: (SEO Site Tools) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc [2014-08-24]
CHR Extension: (Easy Clock) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\dplbpgapoedppajbikieafefmcceaagn [2013-07-17]
CHR Extension: (MozBar) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2012-08-06]
CHR Extension: (SEO SERP Workbench) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbgolklgacemnfnmkkpgekngaaggjjl [2014-08-24]
CHR Extension: (TechSmith Snagit) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcnghgbgmemnlbckdipnmelbanpgneik [2014-08-24]
CHR Extension: (Sprout Social) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffiilepjogcpodmgneknklaecmeoenbc [2014-08-24]
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2014-08-24]
CHR Extension: (Nice Tumblr) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfdfdgcjljkdijjbaipabnalhakbcok [2014-08-24]
CHR Extension: (AdBlock) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-06-22]
CHR Extension: (Pin It Button) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-11-06]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2015-01-05]
CHR Extension: (Keep My Opt-Outs) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhnjdplhmcnkiecampfdgfjilccfpfoe [2014-08-24]
CHR Extension: (Cisco WebEx Extension) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2014-11-12]
CHR Extension: (Analytics Blocker) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmcpbefnpobogldglnlikgojpaddibgb [2014-08-24]
CHR Extension: (Diigo Web) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipfakkakbicobflnnminhjjdkglgbmf [2014-08-24]
CHR Extension: (YSlow) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ninejjcohidippngpapiilnmkgllmakh [2014-08-24]
CHR Extension: (chartelligence) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\njhdcfdiifemfnfddhfjmfbkajajceag [2013-06-09]
CHR Extension: (Google Wallet) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (SEO for Chrome) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\oangcciaeihlfmhppegpdceadpfaoclj [2014-08-24]
CHR Extension: (SEO SERP) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoaoaloeipdofknnaapbmdddddioklg [2014-08-24]
CHR Extension: (MonitorTab) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl [2014-08-24]
CHR Extension: (Diigo Web Collector - Capture and Annotate) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\oojbgadfejifecebmdnhhkbhdjaphole [2014-08-24]
CHR Extension: (Google Reader) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-20]
CHR Extension: (Gmail) - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-24]
CHR HKLM-x32\...\Chrome\Extension: [lphidcjgkfcoaafemgpheibnllgmmdpc] - C:\Users\Dawn Anderson\AppData\LocalLow\DownloadManager\AppData\Chrome.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [niaogoecelkfjkgmdlefgifgomobeamj] - C:\Users\Dawn Anderson\AppData\LocalLow\iBryte\Implementations\playbryte\Chrome.crx [Not Found]
CHR StartMenuInternet: Google Chrome - C:\Users\Dawn Anderson\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-07-28] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apache2.2; c:\xampp\apache\bin\httpd.exe [18432 2011-09-10] (Apache Software Foundation) [File not signed]
R2 AWRScheduler; C:\Program Files (x86)\Caphyon\Advanced Web Ranking\Scheduler.exe [134248 2013-07-15] (Caphyon)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
R2 FortiSslvpnDaemon; C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe [954080 2014-04-09] (Fortinet Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 IswSvc; C:\Program Files (x86)\CheckPoint\AKL\AkSVC.exe [1144952 2014-07-17] (Check Point Software Technologies LTD)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [84624 2013-06-10] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
R2 mysql; c:\xampp\mysql\bin\mysqld.exe [8158720 2011-09-09] () [File not signed]
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 Splunkd; C:\Program Files\Splunk\bin\splunkd.exe [25400584 2014-02-11] (Splunk Inc.)
R2 splunkweb; C:\Program Files\Splunk\bin\splunkweb.exe [20232 2014-02-11] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3596240 2014-07-23] (Check Point Software Technologies Ltd.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)
S2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [93712 2014-07-03] (Check Point Software Technologies, Ltd.)
R2 ZoneAlarm AntiTheft; C:\Program Files (x86)\CheckPoint\AntiTheft\Antitheft.exe [3129480 2014-07-23] (Check Point Software Technologies Ltd.)
R2 ZoneAlarmBackup Service; C:\ZoneAlarmBackup\ZABackup Service.exe [149008 2010-03-11] (Pro Softnet Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-15] (AVG Technologies)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-09-02] (Brother Industries Ltd.)
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-05-22] (C-Media Inc)
R3 icsak; C:\Program Files (x86)\CheckPoint\AKL\ak\icsak.sys [48512 2014-07-17] (Check Point Software Technologies LTD)
R2 ISWKL; C:\Program Files (x86)\CheckPoint\AKL\ISWKL.sys [54144 2014-07-17] (Check Point Software Technologies LTD)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2014-06-10] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-06-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [490592 2014-06-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-06-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2014-06-10] (Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [177760 2014-06-10] (Kaspersky Lab ZAO)
R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\ControlCenter\NTIOLib_X64.sys [14136 2009-10-06] (MSI)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 splknetdrv; C:\Windows\System32\DRIVERS\splknetdrv-vista.sys [34816 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 splknetdrv; C:\Windows\SysWOW64\DRIVERS\splknetdrv-vista.sys [34816 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 splunkdrv-win6; C:\Windows\System32\DRIVERS\splunkdrv-win6.sys [44544 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 splunkdrv-win6; C:\Windows\SysWOW64\DRIVERS\splunkdrv-win6.sys [44544 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 SplunkMonitorNoHandle; C:\Windows\System32\DRIVERS\SplunkMonitorNoHandleDrv-vista.sys [19968 2014-02-11] (Windows (R) Win 7 DDK provider)
S3 SplunkMonitorNoHandle; C:\Windows\SysWOW64\DRIVERS\SplunkMonitorNoHandleDrv-vista.sys [19968 2014-02-11] (Windows (R) Win 7 DDK provider)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-01-08] ()
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450456 2014-07-22] (Check Point Software Technologies Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

dawnieando · Jan 10, 2015

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 16:09 - 2015-01-10 16:13 - 00032112 _____ () C:\Users\Dawn Anderson\Desktop\FRST.txt
2015-01-10 16:09 - 2015-01-10 16:10 - 00000000 ____D () C:\FRST
2015-01-10 16:09 - 2015-01-10 16:09 - 02124288 _____ (Farbar) C:\Users\Dawn Anderson\Desktop\FRST64.exe
2015-01-10 16:00 - 2015-01-10 16:00 - 00010946 _____ () C:\Users\Dawn Anderson\Desktop\JRT.txt
2015-01-10 15:55 - 2015-01-10 15:55 - 00000000 ____D () C:\Windows\ERUNT
2015-01-10 15:52 - 2015-01-10 15:53 - 01707939 _____ (Thisisu) C:\Users\Dawn Anderson\Desktop\JRT.exe
2015-01-10 15:21 - 2015-01-10 15:31 - 00000000 ____D () C:\AdwCleaner
2015-01-10 15:20 - 2015-01-10 15:20 - 02191360 _____ () C:\Users\Dawn Anderson\Desktop\adwcleaner_4.107.exe
2015-01-09 10:19 - 2015-01-09 10:32 - 00000000 ____D () C:\ComboFix
2015-01-09 08:37 - 2015-01-09 08:53 - 00000000 ____D () C:\Qoobox
2015-01-09 08:37 - 2011-06-26 06:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-01-09 08:37 - 2010-11-07 17:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-01-09 08:37 - 2009-04-20 04:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-01-09 08:37 - 2000-08-31 00:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-01-09 08:37 - 2000-08-31 00:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-01-09 08:37 - 2000-08-31 00:00 - 00098816 _____ () C:\Windows\sed.exe
2015-01-09 08:37 - 2000-08-31 00:00 - 00080412 _____ () C:\Windows\grep.exe
2015-01-09 08:37 - 2000-08-31 00:00 - 00068096 _____ () C:\Windows\zip.exe
2015-01-09 08:36 - 2015-01-09 09:41 - 00000000 ____D () C:\Windows\erdnt
2015-01-09 08:33 - 2015-01-09 08:34 - 05609736 ____R (Swearware) C:\Users\Dawn Anderson\Desktop\ComboFix.exe
2015-01-08 16:47 - 2015-01-08 16:48 - 00005544 _____ () C:\Users\Dawn Anderson\Downloads\How to Beat the Odds in AdWords with Competitive Intelligence.ics
2015-01-08 16:15 - 2015-01-08 16:15 - 00000596 _____ () C:\Users\Dawn Anderson\Downloads\cxt_data_table_fields_2015-01-08.csv
2015-01-08 15:06 - 2015-01-08 15:06 - 00004024 _____ () C:\Users\Dawn Anderson\Downloads\LRT Q&A Webinar for new users.ics
2015-01-08 13:42 - 2015-01-08 13:42 - 00003935 _____ () C:\Users\Dawn Anderson\Downloads\Does Google use Topical PageRank- If so how can you see it in action-.ics
2015-01-08 09:29 - 2015-01-08 10:31 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-01-08 09:24 - 2015-01-08 10:31 - 00000000 ____D () C:\Users\Dawn Anderson\Desktop\mbar
2015-01-08 09:20 - 2015-01-08 09:23 - 16448208 _____ (Malwarebytes Corp.) C:\Users\Dawn Anderson\Desktop\mbar-1.08.2.1001.exe
2015-01-08 08:42 - 2015-01-08 08:42 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-08 08:41 - 2015-01-08 08:42 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-01-08 08:39 - 2015-01-08 08:41 - 15340120 _____ () C:\Users\Dawn Anderson\Desktop\RogueKiller.exe
2015-01-07 09:19 - 2015-01-07 09:19 - 00000714 _____ () C:\Users\Dawn Anderson\Desktop\virus rince 2015.lnk
2015-01-07 09:13 - 2015-01-07 09:13 - 00688992 ____R (Swearware) C:\Users\Dawn Anderson\Downloads\dds.com
2015-01-06 13:22 - 2015-01-06 15:22 - 00001336 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_organic-uk.csv
2015-01-06 13:22 - 2015-01-06 13:22 - 00016291 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_related-uk.csv
2015-01-06 13:22 - 2015-01-06 13:22 - 00001232 _____ () C:\Users\Dawn Anderson\Downloads\politics+betting-phrase_fullsearch-uk.csv
2015-01-05 13:41 - 2015-01-05 13:42 - 00044213 _____ () C:\Users\Dawn Anderson\Downloads\Sporting Index-MoM-Jan-v-Dec-v-Nov-Oct-V-Sep-V-Aug-V-July-V-June-V-May-V-April-2014-Rankings.xlsx
2014-12-19 09:03 - 2014-12-13 05:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-19 09:03 - 2014-12-13 03:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-17 11:45 - 2014-12-17 11:45 - 00026624 _____ () C:\Users\Dawn Anderson\Downloads\Copy Of CV Leads logged in last 7 days - Jefferies Web17-12-14-37724.xls
2014-12-17 11:44 - 2014-12-17 11:44 - 00023552 _____ () C:\Users\Dawn Anderson\Downloads\CV Leads logged in last 7 days - FPI17-12-14-34787.xls
2014-12-15 11:26 - 2014-12-15 11:26 - 00001991 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\Visan
2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-12-15 11:26 - 2014-12-15 11:26 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-12-15 11:23 - 2015-01-05 09:45 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\HpUpdate
2014-12-15 11:22 - 2014-12-15 11:22 - 00003664 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Officejet 2620 series
2014-12-15 11:21 - 2014-12-15 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-15 11:21 - 2014-12-15 11:21 - 00002236 _____ () C:\Users\Public\Desktop\HP Officejet 2620 series.lnk
2014-12-15 11:21 - 2014-12-15 11:21 - 00001173 _____ () C:\Users\Public\Desktop\Shop for Supplies - HP Officejet 2620 series.lnk
2014-12-15 11:19 - 2014-12-15 11:23 - 00000000 ____D () C:\Program Files (x86)\HP
2014-12-15 11:19 - 2014-12-15 11:19 - 00000000 ____D () C:\ProgramData\HP
2014-12-15 11:19 - 2014-12-15 11:19 - 00000000 ____D () C:\Program Files\HP
2014-12-15 11:16 - 2014-12-15 11:16 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-12-15 11:12 - 2014-12-15 11:26 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Local\HP
2014-12-15 10:52 - 2014-12-15 10:52 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-12 15:54 - 2014-10-18 02:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-12 15:54 - 2014-10-18 01:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-12 15:54 - 2014-07-07 02:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-12 15:54 - 2014-07-07 02:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-12 15:54 - 2014-07-07 02:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-12 15:54 - 2014-07-07 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-12 15:54 - 2014-07-07 01:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-12 15:54 - 2014-07-07 01:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-12 15:54 - 2014-07-07 01:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-12 15:54 - 2014-07-07 01:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-12 11:21 - 2014-11-27 01:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-12 11:21 - 2014-11-27 01:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-12 11:21 - 2014-11-22 03:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-12 11:21 - 2014-11-22 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-12 11:21 - 2014-11-22 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-12 11:21 - 2014-11-22 02:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-12 11:21 - 2014-11-22 02:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-12 11:21 - 2014-11-22 02:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-12 11:21 - 2014-11-22 02:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-12 11:21 - 2014-11-22 02:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-12 11:21 - 2014-11-22 02:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-12 11:21 - 2014-11-22 02:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-12 11:21 - 2014-11-22 02:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-12 11:21 - 2014-11-22 02:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-12 11:21 - 2014-11-22 02:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-12 11:21 - 2014-11-22 02:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-12 11:21 - 2014-11-22 02:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-12 11:21 - 2014-11-22 02:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-12 11:21 - 2014-11-22 02:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-12 11:21 - 2014-11-22 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-12 11:21 - 2014-11-22 02:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 11:21 - 2014-11-22 02:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-12 11:21 - 2014-11-22 02:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-12 11:21 - 2014-11-22 02:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-12 11:21 - 2014-11-22 02:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-12 11:21 - 2014-11-22 02:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-12 11:21 - 2014-11-22 02:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-12 11:21 - 2014-11-22 02:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-12 11:21 - 2014-11-22 02:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-12 11:21 - 2014-11-22 01:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-12 11:21 - 2014-11-22 01:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-12 11:21 - 2014-11-22 01:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-12 11:21 - 2014-11-22 01:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-12 11:21 - 2014-11-22 01:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-12 11:21 - 2014-11-22 01:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-12 11:21 - 2014-11-22 01:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-12 11:21 - 2014-11-22 01:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-12 11:21 - 2014-11-22 01:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-12 11:21 - 2014-11-22 01:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-12 11:21 - 2014-11-22 01:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-12 11:21 - 2014-11-22 01:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-12 11:21 - 2014-11-22 01:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-12 11:21 - 2014-11-22 01:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-12 11:21 - 2014-11-22 01:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-12 11:21 - 2014-11-22 01:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-12 11:21 - 2014-11-22 01:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-12 11:21 - 2014-11-22 01:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-12 11:21 - 2014-11-22 01:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-12 11:21 - 2014-11-22 01:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-12 11:21 - 2014-11-22 01:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-12 11:21 - 2014-11-22 01:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-12 11:21 - 2014-11-22 01:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-12 11:21 - 2014-11-22 00:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-12 11:21 - 2014-11-22 00:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-12 11:14 - 2014-12-04 02:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-12 11:14 - 2014-12-04 02:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-12 11:14 - 2014-12-01 23:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-12 11:14 - 2014-11-11 03:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 11:14 - 2014-11-11 02:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-12 11:13 - 2014-11-11 01:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-12 11:08 - 2014-10-30 02:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-12 11:08 - 2014-10-30 01:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-12 11:05 - 2014-10-03 02:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-12 11:05 - 2014-10-03 02:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-12 11:05 - 2014-10-03 02:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-12 11:05 - 2014-10-03 02:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-12 11:05 - 2014-10-03 02:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-12 11:05 - 2014-10-03 01:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-12 11:05 - 2014-10-03 01:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-12 11:05 - 2014-10-03 01:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-12 11:05 - 2014-10-03 01:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-12 11:05 - 2014-10-03 01:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-12 11:04 - 2014-11-08 03:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 11:04 - 2014-11-08 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-12 10:35 - 2014-12-12 11:35 - 03981488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-10 16:01 - 2012-03-11 18:30 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA.job
2015-01-10 15:57 - 2009-07-14 04:45 - 00029136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-10 15:57 - 2009-07-14 04:45 - 00029136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-10 15:56 - 2013-05-26 10:59 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Local\CrashDumps
2015-01-10 15:56 - 2012-03-12 01:36 - 01330946 _____ () C:\Windows\WindowsUpdate.log
2015-01-10 15:48 - 2012-06-18 13:43 - 00000000 ___RD () C:\Users\Dawn Anderson\Dropbox
2015-01-10 15:48 - 2012-04-15 16:07 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox
2015-01-10 15:47 - 2014-09-05 20:48 - 00000000 ____D () C:\ZoneAlarmBackup
2015-01-10 15:45 - 2013-11-01 10:42 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-10 15:45 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-10 15:44 - 2012-03-11 18:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-10 15:44 - 2010-11-21 03:47 - 00798614 _____ () C:\Windows\PFRO.log
2015-01-10 15:44 - 2009-07-14 04:51 - 00037232 _____ () C:\Windows\setupact.log
2015-01-10 15:34 - 2012-03-29 14:46 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-10 15:29 - 2013-11-01 10:42 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-10 15:29 - 2013-01-26 21:41 - 00001285 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2015-01-10 15:29 - 2012-03-11 18:34 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\CheckPoint
2015-01-10 15:26 - 2012-03-11 18:30 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core.job
2015-01-10 05:00 - 2012-03-11 19:21 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Skype
2015-01-09 17:13 - 2012-03-17 12:27 - 00000000 ____D () C:\Users\Dawn Anderson\Documents\Outlook Files
2015-01-09 13:57 - 2013-01-27 08:58 - 00035289 ____H () C:\Windows\SysWOW64\BTImages.dat
2015-01-09 10:30 - 2009-07-14 02:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-09 09:40 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\rescache
2015-01-09 08:57 - 2012-04-26 09:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-09 08:53 - 2014-02-17 10:19 - 00000000 ____D () C:\Program Files (x86)\runonce
2015-01-09 08:53 - 2012-03-11 17:44 - 00000000 ____D () C:\Users\Dawn Anderson
2015-01-08 09:29 - 2014-09-05 21:11 - 00135384 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-08 09:27 - 2014-09-05 21:09 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-08 08:37 - 2014-01-18 19:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-06 15:25 - 2013-08-15 08:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-01-06 12:24 - 2009-07-14 05:32 - 00000000 ____D () C:\Windows\Performance
2015-01-06 04:36 - 2010-11-21 03:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-15 12:18 - 2012-03-11 18:30 - 00002366 _____ () C:\Users\Dawn Anderson\Desktop\Google Chrome.lnk
2014-12-15 11:37 - 2012-06-18 13:43 - 00001003 _____ () C:\Users\Dawn Anderson\Desktop\Dropbox.lnk
2014-12-15 11:37 - 2012-04-16 19:49 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-15 10:52 - 2014-05-07 02:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-15 10:52 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 10:52 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-12 16:03 - 2012-03-14 13:53 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 15:43 - 2012-04-30 19:36 - 00000000 ____D () C:\Users\Dawn Anderson\AppData\Roaming\vlc
2014-12-12 11:37 - 2012-03-29 14:46 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-12 11:35 - 2012-03-29 14:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-12 11:35 - 2012-03-29 14:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Dawn Anderson\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpww0zzb.dll
C:\Users\Dawn Anderson\AppData\Local\Temp\Quarantine.exe
C:\Users\Dawn Anderson\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-09 09:28

==================== End Of Log ============================

dawnieando · Jan 10, 2015

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2015
Ran by Dawn Anderson at 2015-01-10 16:15:14
Running from C:\Users\Dawn Anderson\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ZoneAlarm Extreme Security Antivirus (Enabled - Up to date) {23B6D20A-C2DE-B3F5-C67D-07ECD854E6A9}
AS: ZoneAlarm Extreme Security Anti-Spyware (Enabled - Up to date) {98D733EE-E4E4-BC7B-FCCD-3C9EA3D3AC14}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Extreme Security Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advanced Web Ranking (HKLM-x32\...\{B79DB1B4-8CBD-4415-8FAE-A7C0E584811F}) (Version: 10.0 - Caphyon)
AMD Catalyst Install Manager (HKLM\...\{9AFAAEAF-7256-793D-AE2B-B4B2C5B3A807}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.)
Artisteer 3 (HKLM-x32\...\Artisteer 3) (Version: 3.0 - Extensoft)
BIOS Code Unlocked Technology (HKLM-x32\...\{D9B5FC5B-815A-4EE9-B7BF-08165F2A6A36}_is1) (Version: 1.0.106 - MSI)
Brother MFL-Pro Suite MFC-440CN (HKLM-x32\...\{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}) (Version: 1.0.3.0 - Brother Industries, Ltd.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.)
Canon MX520 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX520_series) (Version: 1.00 - Canon Inc.)
Canon MX520 series On-screen Manual (HKLM-x32\...\Canon MX520 series On-screen Manual) (Version: 7.6.0 - Canon Inc.)
Canon MX520 series User Registration (HKLM-x32\...\Canon MX520 series User Registration) (Version: - ‭Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.)
Canon Speed Dial Utility (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.)
Cisco WebEx Meetings (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
Citrix Online Launcher (HKLM-x32\...\{E1B40232-F73B-4BF9-A819-E352CCC1EDEF}) (Version: 1.0.122 - Citrix)
C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version: - )
Desktop SMS (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\c5835c0d3467e909) (Version: 1.0.0.27 - Text Services)
Dropbox (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
EasyViewer (HKLM-x32\...\InstallShield_{EECD7B96-1416-4D3A-B12D-0D2512120C36}) (Version: 1.3.0.9 - MSI)
EasyViewer (x32 Version: 1.3.0.9 - MSI) Hidden
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
FastStone Capture 7.3 (HKLM-x32\...\FastStone Capture) (Version: 7.3 - FastStone Soft)
FileZilla Client 3.6.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.6.0.1 - FileZilla Project)
FortiClient SSLVPN v4.0.2300 (HKLM-x32\...\{A34DCE59-0004-0000-2300-3F8A9926B752}) (Version: 4.0.2300 - Fortinet Inc.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
GlassFish Server Open Source Edition 3.1.2 (HKLM\...\nbi-glassfish-mod-3.1.2.23.0) (Version: - )
Google AdWords Editor (HKLM-x32\...\{C2F536D9-91E1-4B5C-8A97-9BEB2943EFD1}) (Version: 10.4.1 - Google)
Google Apps Migration For Microsoft Outlook® 3.1.21.46 (HKLM-x32\...\{09538C28-E130-4210-A8F3-1D175EE2DDF1}) (Version: 3.1.21.46 - Google, Inc.)
Google Apps Sync™ for Microsoft Outlook® 3.5.385.1020 (HKLM-x32\...\{CEBBF68C-4C3F-4D9B-8482-428E01064C31}) (Version: 3.5.385.1020 - Google, Inc.)
Google Chrome (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GoToMeeting 5.7.0.1172 (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\GoToMeeting) (Version: 5.7.0.1172 - CitrixOnline)
HP Officejet 2620 series Basic Device Software (HKLM\...\{66B122CE-42ED-4143-94D2-B28575A4619F}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Officejet 2620 series Help (HKLM-x32\...\{18DE383C-ADAE-4720-9A00-077239991ACA}) (Version: 31.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IBP 12.0.3 (HKLM-x32\...\IBP12_is1) (Version: 12.0.3 - Axandra GmbH)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
IIS URL Rewrite Module 2 (HKLM\...\{EB675D0A-2C95-405B-BEE8-B42A65D23E11}) (Version: 7.2.2 - Microsoft Corporation)
iisnode for iis 7.x (x64) core (HKLM\...\{03BE434C-5574-4200-B840-20F2848BD1C0}) (Version: 0.1.19.0 - Microsoft Corporation)
iisnode for iis 7.x dev package (HKLM-x32\...\{1086280C-97AB-42F7-BA69-2F83C12D1E2D}) (Version: 0.1.21.0 - Microsoft Corporation)
import.io (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\{95981586-8D7F-49E9-9C7F-3AA704641471}_is1) (Version: 0.1 - import.io)
Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle)
Java(TM) 7 Update 3 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417003FF}) (Version: 7.0.30 - Oracle)
Java(TM) SE Development Kit 7 Update 3 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170030}) (Version: 1.7.0.30 - Oracle)
JavaFX 2.0.3 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
JavaFX 2.0.3 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
join.me (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\JoinMe) (Version: 1.7.0.138 - LogMeIn, Inc.)
Live Update 5 (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 5.0.066 - MSI)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mendeley Desktop 1.12.2 (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\Mendeley Desktop) (Version: 1.12.2 - Mendeley Ltd.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages 2 (HKLM-x32\...\{cb29be6c-39c4-493e-9da7-d585d5353714}) (Version: 2.0.20715.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{471AAD2C-9078-4DAC-BD43-FA10FB7C3FCE}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{6D10FB2C-82A9-40F2-91D0-7BE64CF0DAF2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 Scripting Tools ENU CTP1 (HKLM-x32\...\{82284382-30E3-4DED-980B-746278DA6CC2}) (Version: 4.0.8854.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 Web Tools ENU (HKLM-x32\...\{A51500FE-6408-4305-B071-B961F691A4CE}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 for Web - ENU (HKLM-x32\...\{4bd1cdab-bf82-42c1-af37-e4918141913f}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Platform Installer 4.5 (HKLM\...\{458707CD-9D7A-477F-B925-02242A29673B}) (Version: 4.0.1863 - Microsoft Corporation)
Microsoft WebMatrix 3 (HKLM-x32\...\{E03D06BD-D94B-46D0-9FD9-35FE36106C89}) (Version: 2.0.1920 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-GB)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSI Afterburner 2.1.0 (HKLM-x32\...\Afterburner) (Version: 2.1.0 - MSI Co., LTD)
MySQL Connector Net 6.5.4 (HKLM-x32\...\{92E19B5A-1985-49BF-9022-9CF4AD652C72}) (Version: 6.5.4 - Oracle)
NetBeans IDE 7.1.1 (HKLM\...\nbi-nb-base-7.1.1.0.0) (Version: 7.1.1 - NetBeans.org)
node.js (HKLM-x32\...\{BD99B630-E3FF-4DB5-AA19-BC9990021429}) (Version: 0.6.20 - Joyent, Inc)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.8 - )
NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.2.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
OpenOffice.org 3.3 (HKLM-x32\...\{82AF3E91-57E1-4754-84D0-40A46E2479AB}) (Version: 3.3.9567 - OpenOffice.org)
PC Tune-Up (HKLM\...\{917443c8-4fab-4c87-8ef3-ac150db4d42c}.sdb) (Version: - )
PC Tune-Up (x32 Version: 2.2.0.1 - ZoneAlarm) Hidden
PowerMapper 5 (HKLM-x32\...\{3A2207D8-C409-464F-BF7C-DAD779AABFA3}) (Version: 5.15.690.0 - PowerMapper Software)
PPC Campaign Generator (HKLM-x32\...\{FD5B6F5A-853C-45B2-A8DC-87D4701B7DD4}) (Version: 2.0.50727 - JnZ Productions)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Product Improvement Study for HP Officejet 2620 series (HKLM\...\{9D220B6C-7E14-4E90-9D66-421310A3C87E}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Quick Article Spinner (HKLM-x32\...\Quick Article Spinner) (Version: 3.0 - QuickArticlePro)
Quick Article Submitter (HKLM-x32\...\Quick Article Submitter) (Version: - )
QuickArticlePro 3 .0 (HKLM-x32\...\QuickArticlePro 3 .0) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6449 - Realtek Semiconductor Corp.)
Review Writer (HKLM-x32\...\ReviewWriter) (Version: 3.0 - ReviewWriter)
RoboForm 7-8-8-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-8-8-5 - Siber Systems)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 2.55 - Screaming Frog Ltd)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Snagit 11 (HKLM-x32\...\{68723B04-57EC-11E1-A6A8-9E2D4824019B}) (Version: 11.1.0 - TechSmith Corporation)
Snap.Do (HKLM-x32\...\{8ABED4F1-34E7-420B-9BD1-FD6FFC0BDDE1}) (Version: 1.6.1.751 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKU\S-1-5-21-688939681-313738502-1202394865-1000\...\{64101aeb-5300-459b-a2fb-c88cabc326d7}) (Version: 1.6.1.751 - ReSoft Ltd.) <==== ATTENTION
Splunk (HKLM\...\{3A7B396D-31A9-43A0-A4E6-1F51AD9EA6F3}) (Version: 6.0.2.196940 - Splunk, Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
SQL Server 2008 R2 Common Files (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
SQL Server 2008 R2 Database Engine Services (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
SQL Server 2008 R2 Database Engine Shared (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.0.111 - MSI)
Teaming Genie (HKLM-x32\...\{AF9B9CCF-D1B4-44B4-A030-BFCF5686AA5E}_is1) (Version: 1.0.1.2 - MSI)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
VideoGenie (HKLM-x32\...\{FC54FD8D-789C-406D-BB88-F7C4421B7E83}_is1) (Version: 1.0.0.12 - MSI)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN)
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Web CEO 11.0 (HKLM-x32\...\WebCEO70_is1) (Version: 11.0 - Web CEO Ltd.)
Windows Azure Authoring Tools - October 2012 Release (HKLM\...\{8748EE66-A92C-472A-805A-A86C41D22848}) (Version: 1.8.31004.1351 - Microsoft Corporation)
Windows Azure Emulator - October 2012 Release (HKLM\...\Windows Azure Emulator - October 2012 Release) (Version: 1.8.31004.1351 - Microsoft Corporation)
Windows Azure Libraries for .NET – October 2012 (HKLM\...\{72934D7D-3379-497D-8FA4-1E28D21AFA20}) (Version: 1.8 - Microsoft Corporation)
Windows Azure PowerShell - December 2012 (HKLM-x32\...\{25C8C323-2360-4680-B9A6-D7ED7EDA95E2}) (Version: 0.6.9 - Microsoft Corporation)
Winki (HKLM-x32\...\{81CF5153-38CF-41e2-AC3C-3D477C987D96}_is1) (Version: 3.2.115 - MSI)
XAMPP 1.7.7 (HKLM-x32\...\xampp) (Version: - )
Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
ZoneAlarm Antivirus (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Backup Powered by IDrive version 1.0.5 March 14, 2013 (HKLM-x32\...\ZoneAlarm Backup Powered by IDrive_is1) (Version: 1.0.5 - ProSoftnet Corp)
ZoneAlarm Do Not Track Add-on 2.2.5.1213 (HKLM-x32\...\ZoneAlarm Do Not Track Add-on_is1) (Version: 2.2.5.1213 - Abine)
ZoneAlarm Extreme Security (HKLM-x32\...\ZoneAlarm Extreme Security) (Version: 13.3.052.000 - Check Point)
ZoneAlarm Find My Laptop (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Firewall (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Security (x32 Version: 13.3.052.000 - Check Point Software Technologies Ltd.) Hidden
Zoom Downloader (HKLM-x32\...\Zoom Downloader) (Version: - Zoom Downloader) <==== ATTENTION!

dawnieando · Jan 10, 2015

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\1172\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-688939681-313738502-1202394865-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Dawn Anderson\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points =========================

09-01-2015 13:55:55 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2015-01-09 09:37 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {15C42F10-6E73-402B-B207-EA4E6E94C58C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {16174CA6-14FF-4FE2-94C4-C9293BC293D5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01] (Google Inc.)
Task: {37018247-ED46-4A18-8A28-20867EF09B8F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01] (Google Inc.)
Task: {49FA0F89-6021-4B6F-AA9F-89C4785CA714} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {765DAA04-E2D5-4D33-92EC-59AD2380D71A} - System32\Tasks\{2019D873-1025-4DBD-AC41-BC69665BAC7C} => Chrome.exe http://ui.skype.com/ui/0/6.18.0.105/en/abandoninstall?page=tsProgressBar
Task: {85D746CB-A851-4BC3-BD1F-C43EB50FD2FB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {9428D095-47A8-48A8-9F7E-0683E3F0EDC1} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/test-pass.h...JIIBJPNOLBJLJKJNIMIAJBJJNKJCMJNNICMJNDJCMKJBJ"
Task: {9A3A16EB-8588-4CA5-8FC3-40744243A6EA} - System32\Tasks\{A1111620-7EF8-4C9F-AA55-722FD423233F} => pcalua.exe -a "C:\Users\Dawn Anderson\AppData\Local\Temp\Temp1_PPCCampaignGenerator_Setup_2.92.zip\PPC_Campaign_Generator_setup\PPC Campaign Generator setup.exe"
Task: {E9770869-DB0E-4817-9F40-9B9DDF6AF7A3} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-04-23] (Siber Systems)
Task: {F047A827-89C7-424B-B1C3-A25C77629F5E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-12] (Adobe Systems Incorporated)
Task: {FAFB1298-57C3-4B09-81D7-FA9E6372F2EA} - System32\Tasks\HPCustParticipation HP Officejet 2620 series => C:\Program Files\HP\HP Officejet 2620 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000Core.job => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688939681-313738502-1202394865-1000UA.job => C:\Users\Dawn Anderson\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-19 03:04 - 2013-01-18 15:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-08-15 09:06 - 2012-03-28 13:19 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-09-11 09:41 - 2014-05-08 12:39 - 00014632 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mlfhook64.dll
2011-09-09 17:46 - 2011-09-09 17:46 - 08158720 _____ () c:\xampp\mysql\bin\mysqld.exe
2014-02-11 17:33 - 2014-02-11 17:33 - 01305352 _____ () C:\Program Files\Splunk\bin\libxml2.dll
2014-02-11 17:33 - 2014-02-11 17:33 - 00229128 _____ () C:\Program Files\Splunk\bin\libxslt.dll
2014-02-11 17:33 - 2014-02-11 17:33 - 00666376 _____ () C:\Program Files\Splunk\bin\archive.dll
2014-02-11 17:33 - 2014-02-11 17:33 - 00020232 _____ () C:\Program Files\Splunk\bin\splunkweb.exe
2014-02-11 17:33 - 2014-02-11 17:33 - 00142600 _____ () C:\Program Files\Splunk\bin\pywintypes27.dll
2014-02-11 17:33 - 2014-02-11 17:33 - 00037128 _____ () C:\Program Files\Splunk\bin\servicemanager.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00057608 _____ () C:\Program Files\Splunk\bin\win32service.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00132360 _____ () C:\Program Files\Splunk\bin\win32api.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00013576 _____ () C:\Program Files\Splunk\bin\_win32sysloader.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00028424 _____ () C:\Program Files\Splunk\bin\win32event.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00053000 _____ () C:\Program Files\Splunk\bin\_socket.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00033032 _____ () C:\Program Files\Splunk\bin\_ssl.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00171272 _____ () C:\Program Files\Splunk\bin\_elementtree.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00169224 _____ () C:\Program Files\Splunk\bin\pyexpat.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 01009928 _____ () C:\Program Files\Splunk\bin\etree.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00082184 _____ () C:\Program Files\Splunk\bin\libexslt.dll
2014-02-11 17:33 - 2014-02-11 17:33 - 00017160 _____ () C:\Program Files\Splunk\bin\select.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00116488 _____ () C:\Program Files\Splunk\bin\_ctypes.pyd
2014-02-11 17:34 - 2014-02-11 17:34 - 00143112 _____ () C:\Program Files\Splunk\bin\win32file.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00696072 _____ () C:\Program Files\Splunk\bin\unicodedata.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00017160 _____ () C:\Program Files\Splunk\bin\rand.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00063240 _____ () C:\Program Files\Splunk\bin\crypto.pyd
2014-02-11 17:33 - 2014-02-11 17:33 - 00052488 _____ () C:\Program Files\Splunk\bin\SSL.pyd
2011-07-28 17:44 - 2011-07-28 17:44 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-04-23 13:56 - 2011-05-28 13:31 - 00430080 _____ () C:\Program Files (x86)\QuickArticleSubmitter\AutoSubmission.exe
2014-09-11 09:41 - 2014-05-08 12:40 - 00111912 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\crsrpt64.dll
2014-09-11 09:41 - 2014-05-08 12:39 - 00379176 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\mtdsdk64.dll
2014-09-11 09:41 - 2014-05-08 12:39 - 00223528 _____ () C:\Program Files (x86)\CheckPoint\ZoneAlarm\MailFrontier\resources\mbzaenu64.dll
2010-01-02 14:42 - 2010-01-02 14:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-10-22 00:22 - 2014-10-22 00:22 - 00750080 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-01-10 15:47 - 2015-01-10 15:47 - 00043008 _____ () c:\Users\Dawn Anderson\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpww0zzb.dll
2014-10-22 00:22 - 2014-10-22 00:22 - 00047616 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 00:22 - 2014-10-22 00:22 - 00863744 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 00:22 - 2014-10-22 00:22 - 00200704 _____ () C:\Users\Dawn Anderson\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2011-01-17 16:19 - 2012-03-12 10:27 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2009-07-13 21:03 - 2009-07-14 01:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2012-05-01 12:03 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-01-18 19:20 - 2015-01-08 08:37 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-12-12 11:35 - 2014-12-12 11:35 - 16841392 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrator (S-1-5-21-688939681-313738502-1202394865-500 - Administrator - Disabled)
Dawn Anderson (S-1-5-21-688939681-313738502-1202394865-1000 - Administrator - Enabled) => C:\Users\Dawn Anderson
Guest (S-1-5-21-688939681-313738502-1202394865-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-688939681-313738502-1202394865-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2015-01-09 08:53:38.038
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-09 08:53:37.901
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-06 08:55:05.918
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-01-06 08:55:05.917
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-01-06 08:55:05.916
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-01-06 08:55:03.715
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-01-06 08:55:03.713
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2015-01-06 08:55:03.712
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-12-19 09:14:24.108
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x86\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-12-19 09:14:20.352
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\CheckPoint\ZoneAlarm\avsys\install\instdrivers\kl1\x64\win8\klelam.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: AMD Athlon(tm) II X2 265 Processor
Percentage of memory in use: 67%
Total physical RAM: 4095.18 MB
Available physical RAM: 1338.99 MB
Total Pagefile: 8188.54 MB
Available Pagefile: 4765.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:198.62 GB) NTFS
Drive e: (Storage) (Fixed) (Total:1863.01 GB) (Free:1858.41 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 6E76CDC9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: F1C788B6)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Broni · Jan 10, 2015

Uninstall McAfee Security Scan Plus, typical foistware.

Uninstall:
- Snap.Do
- Snap.Do Engine
- Zoom Downloader

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

dawnieando · Jan 12, 2015

Ok, I'm having a little problem, zoom downloader removed without uninstalling saying that there was nothing to uninstall and asked if I wanted to remove it from the program manager.

Snap.Do threw up this problem

the feature you are trying to use is on a network reasource that is unavailable.

click ok to try again, or enter an alternate path to a folder containing the installation package 'LinkuryInstaller.msi' in the box below.

I tried searching for the file via the windows search function, but found no results.

Broni · Jan 12, 2015

It looks like just registry leftovers.
I adjusted "fixlist.txt" file accordingly.
You can run the fix now.

Solved Virus removal needed on business computer

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 56,041 +516

Posts: 24 +0

Posts: 56,041 +516

Posts: 24 +0

Posts: 56,041 +516

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 24 +0

Posts: 56,041 +516

Attachments

Posts: 24 +0

Posts: 56,041 +516

Similar threads