settler

how do i remove this whole post please

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-10-2014 Ran by User at 2014-10-26 20:36:20 Running from C:\Users\User\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34309 - BitTorrent Inc.) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated) Adobe Reader X (10.1.6) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.6 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.4.634 - Adobe Systems, Inc.) AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{63ADEC24-A374-80A8-E89B-BE401C787F75}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform) Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft) Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5407 - CyberLink Corp.) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1926 - CyberLink Corp.) CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.6.4319 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.4.5527 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Energy Star (HKLM\...\{0FA995CC-C849-4755-B14B-5404CC75DC24}) (Version: 1.0.8 - Hewlett-Packard) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.101 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden HP Documentation (HKLM-x32\...\{8E7CB625-076C-4812-87B9-A2695C2CFABF}) (Version: 1.1.0.0 - Hewlett-Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.3.0 - WildTangent) HP Postscript Converter (Version: 3.1.3554 - Hewlett-Packard) Hidden HP Quick Launch (HKLM-x32\...\{4ED7050C-9332-4FB2-AB07-E94F25A53D39}) (Version: 3.0.3 - Hewlett-Packard Company) HP Recovery Manager (x32 Version: 7.00 - Hewlett-Packard) Hidden HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{835B275B-F29B-464B-BD4B-097FD55FAB0A}) (Version: 4.6.8.1 - Hewlett-Packard Company) HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.7 - Hewlett-Packard) HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.5.1 - Hewlett-Packard Company) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan) iTunes (HKLM\...\{77DE5105-D05E-448C-96CB-7FA381903753}) (Version: 11.3.1.2 - Apple Inc.) Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden KNOWHOW APP CENTRE (HKLM-x32\...\KNOWHOW APP CENTRE 41526) (Version: 3.8.0.41526.31 - KNOWHOW) Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 17.0.2011.0627 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden PrimoPDF -- brought to you by Nitro PDF Software (HKLM-x32\...\PrimoPDF) (Version: 5 - Nitro PDF Software) Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.2.0 - Ralink) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.) RIFT (HKCU\...\RIFT) (Version: - Trion Worlds, Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated) UnoHelper (HKLM-x32\...\{0F03F8DC-DE2F-4BB5-9035-5E66DAEB3483}) (Version: 1.0.3 - UnoTelly) VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\npAppUp_x64.dll (Intel) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\npAppUp_x64.dll (Intel) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3856750982-4239136074-616122952-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= 02-10-2014 20:47:41 Scheduled Checkpoint 11-10-2014 18:22:13 Removed Java 7 Update 60 15-10-2014 14:31:25 Restore Operation 25-10-2014 13:02:00 Scheduled Checkpoint ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 13:25 - 2013-08-22 13:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {01ACF326-3D2E-468E-8D4C-DA359D579011} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {1485FC9E-CA9C-446F-BC1A-8C31A5D3311D} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation) Task: {1CE960D4-8C6F-411E-A1B2-5269FF411EE7} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink) Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2A100F9E-A816-4D74-B0AE-2D88F212F218} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVASTSoftware\Avast\AvastEmUpdate.exe [2014-09-17] (AVAST Software) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {30C0A782-681B-4D2B-BFFF-BD4B090B8119} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-17] () Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {4515250B-2C2D-4315-AFB0-5EE701E1DB37} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6B00F51D-4DFF-4C11-B8BF-4D6089C7CF7C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {74B8AFF9-A350-42A2-984B-47F9D827CA48} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-29] (Synaptics Incorporated) Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {786C93CC-9900-4D2B-80AA-4F6B5FC1D53F} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {79900EB1-5CD7-44E2-9D25-FE45964F335F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {8612EA8E-6231-476F-ADF2-C7B1723E4BE6} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8756A15C-EDA8-42D0-BD85-3E57EE1DAA72} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {AC81966D-01D2-4CC9-A6B5-03E01363B0CD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-23] (Google Inc.) Task: {BBD341FB-86D8-464E-8F69-D6A217F90D7D} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D3FEAD73-58EF-4E05-85C1-5EC0319ABFF5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company) Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {D8EAA11C-6FEF-4C11-BD6C-28068A34FF0F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {DC46B727-B675-450E-A569-496FC7B4DE63} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-10-26] (Microsoft Corporation) Task: {DCA6EA3A-8BBC-40A2-A998-269C5FE8F79E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {E0299BA3-2F00-4953-8290-5D9752EE2D01} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {E88B46F6-B759-4AFD-852C-A986E2CD6F14} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-25] (Adobe Systems Incorporated) Task: {F71A09A9-F09D-41BB-B162-0E66367E59C0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-23] (Google Inc.) Task: {FBCD24D6-AD84-4B2C-BFE3-992FFA8C2A23} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (whitelisted) ============= 2013-05-12 19:03 - 2011-02-28 22:37 - 00095008 _____ () C:\WINDOWS\System32\Primomonnt.dll 2014-09-17 18:54 - 2014-09-17 18:54 - 00301152 _____ () C:\Program Files\AVASTSoftware\Avast\aswProperty.dll 2014-10-25 22:15 - 2014-10-25 22:15 - 02897920 _____ () C:\Program Files\AVASTSoftware\Avast\defs\14102501\algo.dll 2014-10-26 19:34 - 2014-10-26 19:34 - 02897920 _____ () C:\Program Files\AVASTSoftware\Avast\defs\14102600\algo.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2012-10-17 10:11 - 2012-06-08 03:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2012-06-08 10:34 - 2012-06-08 10:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2014-09-17 18:54 - 2014-09-17 18:54 - 19329904 _____ () C:\Program Files\AVASTSoftware\Avast\libcef.dll 2014-10-11 17:29 - 2014-10-01 05:54 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libglesv2.dll 2014-10-11 17:29 - 2014-10-01 05:54 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libegl.dll 2014-10-11 17:29 - 2014-10-01 05:54 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\pdf.dll 2014-10-11 17:29 - 2014-10-01 05:54 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\ffmpegsumo.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2014-10-11 17:29 - 2014-10-01 05:54 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\User\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: iphlpsvc => 2 MSCONFIG\Services: iPod Service => 3 MSCONFIG\Services: SkypeUpdate => 2 HKLM\...\StartupApproved\Run32: => "KNOWHOW APP CENTRE" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "Uno Helper" ========================= Accounts: ========================== Administrator (S-1-5-21-3856750982-4239136074-616122952-500 - Administrator - Disabled) Guest (S-1-5-21-3856750982-4239136074-616122952-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3856750982-4239136074-616122952-1006 - Limited - Enabled) User (S-1-5-21-3856750982-4239136074-616122952-1002 - Administrator - Enabled) => C:\Users\User ==================== Faulty Device Manager Devices ============= Name: Realtek PCIe FE Family Controller Description: Realtek PCIe FE Family Controller Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Service: RTL8168 Problem: : Your computer's system firmware does not include enough information to properly configure and use this device. To use this device, contact your computer manufacturer to obtain a firmware or BIOS update. (Code 35) Resolution: The Multiprocessor System (MPS) table, which stores the resource assignments for the BIOS, is missing an entry for your device and needs to be updated. Obtain a new BIOS from the system vendor. ==================== Event log errors: ========================= Application errors: ================== Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15312 Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15312 Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/25/2014 02:21:11 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoId={8AC9F5C1-6A9D-422D-9CCB-370D2FDE2122}: The user SYSTEM dialed a connection named Broadband Connection which has failed. The error code returned on failure is 651. Error: (10/25/2014 02:20:17 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoId={614FE875-6F4C-4880-B9DC-76E2BF177188}: The user SYSTEM dialed a connection named Broadband Connection which has failed. The error code returned on failure is 651. Error: (10/25/2014 00:40:27 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (10/15/2014 05:40:13 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoId={7D5EE2C9-6F99-4B4E-868B-0C68799EEC64}: The user SYSTEM dialed a connection named Broadband Connection which has failed. The error code returned on failure is 651. Error: (10/15/2014 04:49:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: DllHost.exe, version: 6.3.9600.16384, time stamp: 0x5215dfc6 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x00007ffb1a3e000a Faulting process ID: 0xfe0 Faulting application start time: 0xDllHost.exe0 Faulting application path: DllHost.exe1 Faulting module path: DllHost.exe2 Report ID: DllHost.exe3 Faulting package full name: DllHost.exe4 Faulting package-relative application ID: DllHost.exe5 Error: (10/15/2014 03:24:32 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: An unspecified error occurred during System Restore: (Removed Java 7 Update 60). Additional information: 0xc0000022. Error: (10/15/2014 03:00:00 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (1560) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\WINDOWS\system32\SRU\SRU0017B.log. System errors: ============= Error: (10/26/2014 03:36:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/26/2014 02:09:05 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: The system detected an address conflict for IP address 192.168.1.5 with the system having network hardware address 18-28-61-CB-0B-A9. Network operations on this system may be disrupted as a result. Error: (10/25/2014 02:30:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/15/2014 06:04:36 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/15/2014 06:01:56 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: The previous system shutdown at 17:32:26 on ‎15/‎10/‎2014 was unexpected. Error: (10/15/2014 05:34:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/15/2014 05:15:38 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/15/2014 03:29:41 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. Error: (10/15/2014 03:26:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Error: (10/15/2014 02:54:30 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error: %%1058 Microsoft Office Sessions: ========================= Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15312 Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15312 Error: (10/25/2014 10:58:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/25/2014 02:21:11 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: {8AC9F5C1-6A9D-422D-9CCB-370D2FDE2122}SYSTEMBroadband Connection651 Error: (10/25/2014 02:20:17 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: {614FE875-6F4C-4880-B9DC-76E2BF177188}SYSTEMBroadband Connection651 Error: (10/25/2014 00:40:27 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (10/15/2014 05:40:13 PM) (Source: RasClient) (EventID: 20227) (User: ) Description: {7D5EE2C9-6F99-4B4E-868B-0C68799EEC64}SYSTEMBroadband Connection651 Error: (10/15/2014 04:49:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: DllHost.exe6.3.9600.163845215dfc6unknown0.0.0.000000000c000000500007ffb1a3e000afe001cfe88d825fd74cC:\WINDOWS\system32\DllHost.exeunknown2a74551b-548b-11e4-bec5-8e6347afbe07 Error: (10/15/2014 03:24:32 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Removed Java 7 Update 600xc0000022 Error: (10/15/2014 03:00:00 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost1560SRUJet: C:\WINDOWS\system32\SRU\SRU0017B.log-1811 (0xfffff8ed) ==================== Memory info =========================== Processor: AMD E1-1200 APU with Radeon HD Graphics Percentage of memory in use: 39% Total physical RAM: 5722.26 MB Available physical RAM: 3468.11 MB Total Pagefile: 6682.26 MB Available Pagefile: 3710.71 MB Total Virtual: 131072 MB Available Virtual: 131071.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:679.9 GB) (Free:492.67 GB) NTFS ==>[system with boot components (obtained from reading drive)] Drive d: (RECOVERY) (Fixed) (Total:17.63 GB) (Free:2.2 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 698.6 GB) (Disk ID: B49C96CE) Partition: GPT Partition Type. ==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2014 Ran by User (administrator) on COMPAQ on 26-10-2014 20:32:36 Running from C:\Users\User\Downloads Loaded Profile: User (Available profiles: User) Platform: Windows 8.1 (X64) OS Language: English (United Kingdom) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVASTSoftware\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) C:\mal\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\mal\Malwarebytes Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (AMD) C:\Windows\System32\atieclxx.exe (Malwarebytes Corporation) C:\mal\Malwarebytes Anti-Malware\mbam.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (AVAST Software) C:\Program Files\AVASTSoftware\Avast\avastui.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\User\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor) HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-29] (Synaptics Incorporated) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM-x32\...\Run: [KNOWHOW APP CENTRE] => C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\ismagent.exe [156000 2012-10-09] (Intel Corporation) HKLM-x32\...\Run: [uno Helper] => C:\Program Files (x86)\UnoTelly\UnoHelper\UnoHelper.exe [1906176 2012-05-08] (Unovation Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVASTSoftware\Avast\AvastUI.exe [4085896 2014-09-17] (AVAST Software) HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-10-21] (Hewlett-Packard) HKU\S-1-5-21-3856750982-4239136074-616122952-1002\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVASTSoftware\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [shareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) ShellIconOverlayIdentifiers-x32: [shareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://uk.yahoo.com?fr=hp-avast&type=avastbcl HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://uk.yahoo.com?fr=hp-avast&type=avastbcl HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.safesearch.net/?utm_medium=ie&utm_campaign=135186284071&utm_source=sm&utm_content=1&utm_term=F5EB526F4FC5431A HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://uk.yahoo.com?fr=hp-avast&type=avastbcl HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = https://uk.yahoo.com?fr=hp-avast&type=avastbcl StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {4B51C980-C6B0-11E1-9136-AED16088709B} URL = http://www.safesearch.net/search?q={searchTerms}&utm_medium=ie&utm_campaign=135186284071&utm_source=sm&utm_content=1&utm_term=F5EB526F4FC5431A SearchScopes: HKLM - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKLM - {4B51C980-C6B0-11E1-9136-AED16088709B} URL = http://www.safesearch.net/search?q={searchTerms}&utm_medium=ie&utm_campaign=135186284071&utm_source=sm&utm_content=1&utm_term=F5EB526F4FC5431A SearchScopes: HKLM - {6BE5FB25-9CD9-4569-80B5-EE4C6BE5E58C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CPNTDFJS SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKLM-x32 - {4B51C980-C6B0-11E1-9136-AED16088709B} URL = http://www.safesearch.net/search?q={searchTerms}&utm_medium=ie&utm_campaign=135186284071&utm_source=sm&utm_content=1&utm_term=F5EB526F4FC5431A SearchScopes: HKLM-x32 - {6BE5FB25-9CD9-4569-80B5-EE4C6BE5E58C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKCU - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms} SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKCU - {4B51C980-C6B0-11E1-9136-AED16088709B} URL = http://www.safesearch.net/search?q={searchTerms}&utm_medium=ie&utm_campaign=135186284071&utm_source=sm&utm_content=1&utm_term=F5EB526F4FC5431A SearchScopes: HKCU - {6BE5FB25-9CD9-4569-80B5-EE4C6BE5E58C} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://uk.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/710-29550-11896-25/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - {EA0958B1-4BF4-4F69-AC77-67E279767CED} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dnldstr_14_37_ch&cd=2XzuyEtN2Y1L1QzuyCzzzyyEtBtAtCyB0Dzyzz0FyDzy0EyEtN0D0Tzu0SzyzzyBtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtCyC0Azy0E0AyCtGtAyEtB0DtG0FtA0C0FtG0EyD0DtCtGtAtA0CzyyEzz0C0C0E0D0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyCzy0CyEyEzz0EtGtC0FtC0AtGyEyE0DzztGzytB0D0AtGyDtAtCtDyBzyzy0EtByBtDtC2Q&cr=966768337&ir= BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVASTSoftware\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVASTSoftware\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{227F7F1F-B03B-4DD7-AC95-8252C1B9BB0F}: [NameServer] 23.21.182.24,184.169.139.227 Tcpip\..\Interfaces\{C4F3A16B-4B82-49AF-B845-0C499918281D}: [NameServer] 23.21.182.24,184.169.139.227 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: intel.com/AppUp -> C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\npAppUp.dll (Intel) FF Plugin HKCU: intel.com/AppUpx64 -> C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\npAppUp_x64.dll (Intel) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVASTSoftware\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVASTSoftware\Avast\WebRep\FF [2014-09-17] Chrome: ======= CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-11] CHR Extension: (uTorrentControl_v6) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp [2014-09-24] CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-18] CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-11] CHR HKCU\...\Chrome\Extension: [cflheckfmhopnialghigdlggahiomebp] - C:\Users\User\AppData\Local\CRE\cflheckfmhopnialghigdlggahiomebp.crx [2013-05-22] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVASTSoftware\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-09-17] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.) [File not signed] R2 avast! Antivirus; C:\Program Files\AVASTSoftware\Avast\AvastSvc.exe [50344 2014-09-17] (AVAST Software) R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-10] (Hewlett-Packard Company) [File not signed] R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed] R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation) R2 MBAMScheduler; C:\mal\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) R2 MBAMService; C:\mal\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-02-16] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-09-17] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-09-17] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-09-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-09-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-09-17] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-09-17] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-09-17] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-09-17] () R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2013-03-17] (EldoS Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-26] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation) R1 RawDisk3; C:\WINDOWS\system32\drivers\rawdsk3.sys [32912 2014-07-16] (EldoS Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-29] (Synaptics Incorporated) S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-29] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Development Company, L.P.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-26 20:32 - 2014-10-26 20:33 - 00020672 _____ () C:\Users\User\Downloads\FRST.txt 2014-10-26 20:32 - 2014-10-26 20:32 - 00000000 ____D () C:\FRST 2014-10-26 20:31 - 2014-10-26 20:31 - 02113024 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe 2014-10-26 20:31 - 2014-10-26 20:31 - 02113024 _____ (Farbar) C:\Users\User\Downloads\FRST64 (1).exe 2014-10-26 14:15 - 2014-10-26 19:36 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-10-26 14:14 - 2014-10-26 14:14 - 00000803 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-10-26 14:14 - 2014-10-26 14:14 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-10-26 14:14 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2014-10-26 14:14 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2014-10-26 14:14 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-10-26 14:12 - 2014-10-26 14:14 - 00000000 ____D () C:\mal 2014-10-26 14:11 - 2014-10-26 14:11 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.3.1025 (1).exe 2014-10-26 14:10 - 2014-10-26 14:11 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.3.1025.exe 2014-10-25 19:47 - 2014-09-27 22:25 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-10-25 19:47 - 2014-09-04 00:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-10-25 19:47 - 2014-09-03 23:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-10-25 19:47 - 2014-09-03 23:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-10-25 19:46 - 2014-09-19 02:25 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-10-25 19:46 - 2014-09-19 01:44 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-10-25 19:46 - 2014-09-08 03:15 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-10-25 19:46 - 2014-09-08 01:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-10-25 19:46 - 2014-09-08 01:46 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-10-25 19:46 - 2014-09-08 00:08 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-10-25 19:46 - 2014-09-08 00:07 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-10-25 19:46 - 2014-09-08 00:05 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-10-25 19:46 - 2014-09-08 00:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-10-25 19:46 - 2014-09-08 00:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-10-25 19:46 - 2014-09-08 00:03 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-10-25 19:46 - 2014-09-08 00:03 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-10-25 19:46 - 2014-09-07 23:59 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-10-25 19:46 - 2014-09-07 23:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-10-25 19:46 - 2014-09-07 23:56 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-10-25 19:46 - 2014-09-07 23:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-10-25 19:45 - 2014-09-25 22:50 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-10-25 19:45 - 2014-09-25 22:46 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-10-25 19:45 - 2014-09-25 22:46 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-10-25 19:45 - 2014-09-25 22:43 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-10-25 19:45 - 2014-09-25 22:32 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-10-25 19:45 - 2014-09-25 22:31 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-10-25 19:45 - 2014-09-19 01:41 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-10-25 19:45 - 2014-09-19 01:40 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-10-25 19:45 - 2014-09-19 01:38 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-10-25 19:45 - 2014-09-19 01:36 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-10-25 19:45 - 2014-09-19 01:25 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-10-25 19:45 - 2014-09-19 01:25 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-10-25 19:45 - 2014-09-19 01:02 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-10-25 19:45 - 2014-09-19 01:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-10-25 19:45 - 2014-09-19 00:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-10-25 19:45 - 2014-09-19 00:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-10-25 19:45 - 2014-09-19 00:55 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-10-25 19:45 - 2014-09-19 00:42 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-10-25 19:45 - 2014-09-19 00:42 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-10-25 19:45 - 2014-09-19 00:42 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-10-25 19:45 - 2014-09-19 00:33 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-10-25 19:45 - 2014-09-19 00:20 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-10-25 19:45 - 2014-09-19 00:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-10-25 19:45 - 2014-09-19 00:14 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-10-25 19:45 - 2014-09-18 23:59 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-10-25 19:45 - 2014-09-18 23:59 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-10-25 19:45 - 2014-09-18 23:53 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-10-25 19:45 - 2014-09-18 23:52 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-10-25 19:44 - 2014-09-13 06:29 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-10-25 19:44 - 2014-09-13 05:49 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-10-25 19:44 - 2014-09-04 00:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-10-25 19:44 - 2014-09-04 00:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-10-25 19:44 - 2014-08-16 04:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-10-25 19:44 - 2014-08-16 00:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-10-25 19:43 - 2014-08-16 04:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-10-25 19:43 - 2014-08-16 04:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-10-25 19:43 - 2014-08-16 03:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-10-25 19:43 - 2014-08-16 03:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-10-25 19:43 - 2014-08-16 03:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-10-25 19:43 - 2014-08-16 03:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-10-25 19:43 - 2014-08-16 03:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-10-25 19:43 - 2014-08-16 03:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-10-25 19:43 - 2014-08-16 01:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-10-25 19:43 - 2014-08-16 01:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-10-25 19:43 - 2014-08-16 00:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-10-25 19:43 - 2014-08-16 00:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-10-25 19:43 - 2014-08-16 00:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-10-25 19:43 - 2014-08-16 00:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-10-25 19:43 - 2014-08-16 00:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-10-25 19:43 - 2014-08-16 00:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-10-25 19:43 - 2014-08-16 00:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-10-25 19:43 - 2014-08-16 00:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-10-25 19:43 - 2014-08-16 00:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-25 19:43 - 2014-08-16 00:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-10-25 19:43 - 2014-08-16 00:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-10-25 19:43 - 2014-08-16 00:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-10-25 19:43 - 2014-08-16 00:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-25 19:43 - 2014-08-16 00:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-10-25 19:43 - 2014-08-16 00:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-10-25 19:43 - 2014-08-16 00:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-10-25 19:43 - 2014-08-16 00:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-10-25 19:43 - 2014-08-16 00:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-10-25 19:43 - 2014-08-16 00:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-10-25 19:43 - 2014-08-16 00:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-10-25 19:43 - 2014-08-16 00:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-10-25 19:43 - 2014-08-16 00:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-10-25 19:43 - 2014-07-31 23:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-10-25 19:42 - 2014-10-08 22:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2014-10-25 19:41 - 2014-10-09 22:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2014-10-25 19:41 - 2014-09-19 01:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2014-10-25 19:41 - 2014-09-13 06:02 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-10-25 19:41 - 2014-09-13 05:30 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-10-25 19:41 - 2014-08-29 01:58 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-10-25 19:41 - 2014-08-28 23:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-10-25 19:41 - 2014-08-28 23:47 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-10-25 15:47 - 2014-10-26 19:59 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-10-25 15:47 - 2014-10-25 15:47 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-10-14 16:24 - 2014-10-26 15:31 - 00000798 _____ () C:\WINDOWS\PFRO.log 2014-10-11 17:43 - 2014-10-11 17:43 - 00000000 ____D () C:\ProgramData\McAfee 2014-10-11 17:28 - 2014-10-11 17:28 - 00880272 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe 2014-10-08 22:22 - 2014-10-08 22:22 - 00114958 _____ () C:\Users\User\Downloads\The Lego Movie 2014 Webrip x264 AC3 TiTAN [iPT].torrent 2014-10-08 22:20 - 2014-10-08 22:20 - 00253967 _____ () C:\Users\User\Downloads\The November Man 2014 480p WEBrip XVID AC3 ACAB [iPT].torrent 2014-10-08 22:18 - 2014-10-08 22:18 - 00019336 _____ () C:\Users\User\Downloads\This Is Where I Leave You 2014 HC HDRIP x264 AC3 TiTAN [iPT].torrent 2014-10-08 22:14 - 2014-10-08 22:14 - 00015052 _____ () C:\Users\User\Downloads\***.Tape.2014.BRRip.XviD.AC3-EVO [iPT].torrent 2014-10-08 20:03 - 2014-10-08 20:03 - 00120177 _____ () C:\Users\User\Downloads\End Game [2006]DVDRip[Xvid]AC3 5.1[Eng]-RoCK&BlueLadyRG.avi [iPT].torrent 2014-10-08 20:03 - 2014-10-08 20:03 - 00116752 _____ () C:\Users\User\Downloads\Stretch.2014.WEBRip.XViD.AC3-GLY [iPT].torrent 2014-10-08 20:02 - 2014-10-08 20:02 - 00017185 _____ () C:\Users\User\Downloads\Married.To.The.Mob.1988.WS.DVDRip.XViD.iNT-EwDp [iPT].torrent 2014-10-07 13:48 - 2014-10-07 13:48 - 01054896 _____ (Microsoft Corporation) C:\Users\User\Downloads\office_en-us_.exe 2014-10-05 12:47 - 2014-10-05 12:47 - 00000000 ___HD () C:\OneDriveTemp 2014-10-03 17:13 - 2014-10-26 15:44 - 00000000 ___RD () C:\Users\User\OneDrive 2014-09-26 19:59 - 2014-09-26 19:59 - 00015616 _____ () C:\Users\User\Downloads\The.Investigator.2013.HDRip.XviD.AC3-EVO [iPT].torrent 2014-09-26 19:59 - 2014-09-26 19:59 - 00015616 _____ () C:\Users\User\Downloads\The.Investigator.2013.HDRip.XviD.AC3-EVO [iPT] (1).torrent 2014-09-26 17:00 - 2014-10-26 15:55 - 01758985 _____ () C:\WINDOWS\WindowsUpdate.log ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-26 20:33 - 2013-01-23 17:18 - 00000908 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-10-26 20:00 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-10-26 17:33 - 2013-01-23 17:18 - 00000904 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-10-26 15:40 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports 2014-10-26 15:33 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-10-26 15:33 - 2013-08-22 14:44 - 00414896 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-10-26 15:31 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\en-GB 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-10-26 15:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-10-26 15:26 - 2013-01-24 16:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-10-26 15:25 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-10-26 15:23 - 2014-09-08 01:42 - 00000000 ____D () C:\ProgramData\LizardSales 2014-10-26 15:19 - 2013-08-14 16:40 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-10-26 15:08 - 2012-12-21 10:47 - 103265616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-10-26 15:07 - 2014-07-10 08:04 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2014-10-26 15:06 - 2012-10-17 09:34 - 00009767 _____ () C:\WINDOWS\system32\RaCoInst.log 2014-10-26 14:17 - 2014-03-27 08:23 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3F2C8C88-E441-435C-8482-50184C0CD625} 2014-10-26 14:13 - 2013-04-08 16:56 - 00000000 ____D () C:\films 2014-10-25 19:09 - 2013-02-16 19:44 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-10-25 19:09 - 2013-01-26 19:28 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log 2014-10-25 18:06 - 2013-11-16 19:56 - 00000342 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForUser.job 2014-10-25 16:14 - 2014-09-13 16:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\ClassicShell 2014-10-25 15:48 - 2013-04-04 18:35 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe 2014-10-25 14:45 - 2012-12-20 20:10 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3856750982-4239136074-616122952-1002 2014-10-25 14:35 - 2013-11-14 12:45 - 00956476 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-10-25 14:29 - 2014-09-17 18:54 - 00004180 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2014-10-25 13:45 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-10-15 17:30 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-10-15 15:26 - 2014-09-17 18:55 - 00001973 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-10-15 15:21 - 2014-09-17 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-10-15 15:21 - 2014-09-13 16:39 - 00000000 ____D () C:\ProgramData\ClassicShell 2014-10-15 15:21 - 2014-06-17 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-15 15:21 - 2013-02-06 20:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc 2014-10-15 15:21 - 2013-01-29 13:47 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent 2014-10-15 15:21 - 2013-01-23 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-10-15 15:21 - 2012-12-21 11:14 - 00000000 ____D () C:\Users\User\AppData\Local\Hewlett-Packard 2014-10-15 15:10 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\registration 2014-10-15 15:10 - 2012-12-20 19:59 - 00000000 ____D () C:\Users\User\AppData\Local\Packages 2014-10-15 15:08 - 2014-06-17 16:29 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-15 15:08 - 2013-01-24 16:12 - 00000000 __RHD () C:\MSOCache 2014-10-14 16:39 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\tracing 2014-10-11 18:29 - 2014-06-17 18:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-11 17:28 - 2013-01-23 17:18 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-10-11 17:28 - 2013-01-23 17:18 - 00003644 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-10-07 13:45 - 2013-05-12 18:56 - 00591872 ___SH () C:\Users\User\Downloads\Thumbs.db 2014-10-07 13:39 - 2013-05-12 19:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\PrimoPDF 2014-10-06 11:14 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI(21) 2014-10-04 15:30 - 2014-02-16 13:56 - 00000258 __RSH () C:\Users\User\ntuser.pol 2014-10-01 12:24 - 2014-09-08 21:19 - 00000004 _____ () C:\Users\User\AppData\Roaming\appdataFr2.bin 2014-09-29 22:45 - 2014-07-10 20:30 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-09-29 22:45 - 2014-07-10 20:30 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-28 12:49 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI(20) Some content of TEMP: ==================== C:\Users\User\AppData\Local\Temp\install_flashplayer15x32_mssd_aaa_aih.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-26 18:13 ==================== End Of Log ============================

my laptop is very slow and keeps asking to update flash drive which i know isnt geniune have used the malware tool here are the results, any help appreciated Malwarebytes Anti-Malware http://www.malwarebytes.org Scan Date: 26/10/2014 Scan Time: 15:47:32 Logfile: Administrator: Yes Version: 2.00.3.1025 Malware Database: v2014.10.26.03 Rootkit Database: v2014.10.22.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: User Scan Type: Threat Scan Result: Completed Objects Scanned: 320624 Time Elapsed: 40 min, 27 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 259 PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\flash, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\libjs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\libjs\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_admin, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_admin\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_admin\js, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_admin\localization, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_admin\overlay, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_rss, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_rss\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_rss\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_rss\overlay, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_rss\xsl, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs\localization, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs\localization\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs\localization\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs\localization\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\lib_tabs\localization\it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\locales, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\locales\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\locales\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\locales\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\locales\it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\patch, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\stickers_engine, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\stickers_engine\media, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\img\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\nl, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\localization\sp, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\skins, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\skins\default, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\update_manager\xslt, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\windowssticker, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\nosibox\lib\windowssticker\draggable, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\settings, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51de68b2b79de000, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51de68b2b79de000\skins, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51de7754a23a4000, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51de7754a23a4000\skins, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51dfc353d2d8c000, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0000ffff0000ffff51dfc353d2d8c000\skins, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id0f4ecbc8603c4181b177c21d8776d6eb, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\img\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\img\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\img\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\img\it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\sentinel, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\sentinel\locales, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\sentinel\locales\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\sentinel\locales\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\sentinel\locales\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id49d3044d0d564c3da01748cdc8cb6a1e\xsl, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id6a2984ddedba49fb8219ed28b50978d9, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id6a2984ddedba49fb8219ed28b50978d9\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id6a2984ddedba49fb8219ed28b50978d9\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\alert, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img\en_en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img\en_gb, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img\es_es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img\fr_fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id78c2674859c248f586ba8c7b8e8a258d\img\it_it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\css, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\en, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\es, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\fr, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\it, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\maxi, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\mini, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\stickers\id93b578f8d68c49ac877a581edbc52a2d\img\wind, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\dock, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\dock\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\dock\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id32e3b0b659c6460da15de67efa499363, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id32e3b0b659c6460da15de67efa499363\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id32e3b0b659c6460da15de67efa499363\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id40badd812f6a40a6b3031329101f5838, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id40badd812f6a40a6b3031329101f5838\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\id40badd812f6a40a6b3031329101f5838\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idaf3d85021ec940cba8d9ee8721a1a832, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idaf3d85021ec940cba8d9ee8721a1a832\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idaf3d85021ec940cba8d9ee8721a1a832\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\modules\widgets, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\icons, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\dock, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\dock\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\dock\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id32e3b0b659c6460da15de67efa499363, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id32e3b0b659c6460da15de67efa499363\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id32e3b0b659c6460da15de67efa499363\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id40badd812f6a40a6b3031329101f5838, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id40badd812f6a40a6b3031329101f5838\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\id40badd812f6a40a6b3031329101f5838\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idaf3d85021ec940cba8d9ee8721a1a832, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idaf3d85021ec940cba8d9ee8721a1a832\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idaf3d85021ec940cba8d9ee8721a1a832\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e\img, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\idbc9cd4fd37ea11e3b5f5002590a4191e\img\common, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\livesticker\tabs\windows, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\prefs\themes, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\shared, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\download, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\bin, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\install, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\nosibox, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\settings, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\stickers, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\tabs, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.BubbleDock.A, C:\Users\User\AppData\Roaming\Nosibay\Bubble Dock\tmp\toinstall\widgets, , [83c86cad90ec77bf653940b2df233bc5], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\APISupport, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js\lib, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js\options, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js\tabs, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js\tabs\back, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\js\toolbarAPI, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\mam, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\mam\scripts, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\mam\scripts\contentScripts, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\nativeMessaging, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\plugins, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\html, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages\API, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages\html, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\Search\NewTabPages\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\aboutBox, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\aboutBox\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\aboutBox\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ac, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ac\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ac\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ac\res, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\api, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\msd, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\options, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\options\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\options\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\options\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\options\js\resources, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp\spbd, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp\spbd\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp\spsd, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\sp\spsd\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\dlg, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\dlg\ftd, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\dlg\ftd\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\dlg\restart, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\dlg\restart\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\gadgetFrame, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\gf, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\gf\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\gf\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\gf\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\menu, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\menu\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\menu\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\ui\menu\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\Js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\resources, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\HIGHLIGHTER, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\MULTI_RSS, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\MULTI_RSS\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\MULTI_RSS\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\MULTI_RSS\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\resources, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\NOTIFICATION\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\Optimizer, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\Optimizer\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\PRICE_GONG, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\PRICE_GONG\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\custom-theme, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\PRICE_GONG\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\RADIO_PLAYER, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\custom-theme, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\buildSettings, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\Css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\resources, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\view, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\view\script, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\view\style, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\SEARCH\view\style\rsx, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\TWITTER, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\TWITTER\img, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\TWITTER\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\WEATHER, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\WEATHER\css, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\al\wa\WEATHER\js, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\core, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\lib, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\lib\jquery.alerts, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\lib\jquery.alerts\images, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\lib\jquery.jscrollpane, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\tb\sl, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\_locales, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.SlickSavings.A, C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.31.4.510_0\_locales\en, , [311a60b9dca0ce68378b2bdea45fe41c], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [7ecd0910afcd9e988d04f01c6e95aa56], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [7ecd0910afcd9e988d04f01c6e95aa56], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [7ecd0910afcd9e988d04f01c6e95aa56], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [7ecd0910afcd9e988d04f01c6e95aa56], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{7F7E6BDE-9F6A-401D-BA01-7584490FC20B}, , [7ecd0910afcd9e988d04f01c6e95aa56], Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end)